Kernel images history:

Time	Kernel Commit	Kernel Config	Syzkaller Commit	Assets
2026/08/28 10:01	4a7fcd5fc048 Merge pull request #14461 from milantracy:governance		41d151d4
2026/08/27 20:20	bd30d19d87ae Add cos and ubuntu-gpu release agents		e2fa417d
2026/08/27 08:17	e4850e96c18d Add ADOPTERS.md as single source of truth for gvisor users		c53a1b9c
2026/08/26 10:23	fd439eb27c7d Fix CI test flakes in trace_test's Execve trace validation		a2b77b9e
2026/08/25 22:26	917062dc0596 Update gVisor release documentation for GitHub Release workflow.		6a91adb4
2026/08/25 10:23	646783231602 Replace the experimental --mount-cgroup-v2 flag with in-sandbox-cgroup		a9a1fc32
2026/08/24 21:31	0b9499c9fb54 Add GKE Sandbox MicroVM runtime support to gke_tester and testcluster.		614e416a
2026/08/24 09:30	3c5eee17dc45 Merge pull request #14137 from EtiennePerot:le-pinring		b55bd4c3
2026/08/17 20:52	05f3435e51f2 gofer: Take refs when adopting a cached endpoint-bearing inode		1e72964b
2026/08/17 08:51	50e1502a95d3 Nftables: Support xt_MASQUERADE compatibility target.		905244d6
2026/08/14 21:25	32d6f0091cc2 Merge pull request #14021 from TheCoolDinosuar:rdma-proxy		746171ee
2026/08/14 09:18	375fa1be4f2a Support combined restore of full snapshot and filesystem snapshot.		2cf1fbb7
2026/08/13 21:15	97346d1e3754 Merge pull request #14031 from ayushr2:pin-cow-fork		b13552fe
2026/08/13 09:10	35769a56f4fb Nftables: Support xt_addrtype match.		4d118901
2026/08/12 23:11	8879741253cb Add support for custom working directory in Python SandboxExec.		359b2492
2026/08/12 21:07	0165ee007e27 Merge pull request #13976 from luiscape:luis/add-support-for-610.57.04		359b2492
2026/08/12 09:05	0165ee007e27 Merge pull request #13976 from luiscape:luis/add-support-for-610.57.04		ee03bfea
2026/08/11 21:03	1919d9633a18 Merge pull request #13909 from relkochta:relkochta/overlayfs-posix-acls		f8d35649
2026/08/11 09:01	3434348e5909 Make every user of a tty also refcount		557a89d3
2026/08/10 08:46	5ceb9a5fd575 Deflake TestMultiContainerEvent/enableCgroupsV2		558388e4
2026/08/07 22:30	6c89965d6026 Support passing environment variables to Python SandboxExec bindings.		5d63f80b
2026/08/07 10:33	05b57c92aea0 Merge pull request #14019 from EtiennePerot:reexec-be-gone		e4ef95d6
2026/08/06 22:28	8f0384248553 Add support for custom network modes in Python SandboxExec.		c38879ea
2026/08/06 10:26	b85d70344f3e Create per-container cgroup2 dirs and honor spec cgroupns		cc56899a
2026/08/05 22:25	9d9b0681e814 Fix panic in iptables UserChainTarget.Action().		cd5b1963
2026/08/05 10:19	c0908da305ec Merge pull request #13952 from EtiennePerot:waitforstopped-nopoll		1eed00d1
2026/08/04 22:18	6dfa3a9c7ee7 Internal change.		52aa2820
2026/08/04 10:18	901ffefc3a7b udp: Trim packet to header.length.		3c5eaa21
2026/08/03 22:12	3e74ae881798 Deflake PosixACLTest.SetACLEmpty on native		9451e17e
2026/08/03 17:10	3e74ae881798 Deflake PosixACLTest.SetACLEmpty on native		bdd50915
2026/08/03 10:08	48de7274186a Nftables: Changed function name to correctly reflect the purpose.		bdd50915
2026/08/02 14:05	48de7274186a Nftables: Changed function name to correctly reflect the purpose.		e611ffe1
2026/08/02 00:55	54895179ed67 Nftables: Support `chain-id` attribute.		e611ffe1
2026/08/01 11:46	f24eaec79e88 Merge pull request #13941 from ayushr2:pgalloc-usage-throttle		e611ffe1
2026/07/31 22:31	449f04c57356 Allow running syscall tests on non-modern Linux kernels.		e611ffe1
2026/07/31 10:31	c1b4e12cf268 Merge pull request #13712 from ayushr2:rdma-sysfs		0f928e69
2026/07/30 22:29	e52d7a0faa4d Nftables: Support flushing ruleset.		aaffb173
2026/07/30 10:24	3355a32937b4 Merge pull request #13899 from shayonj:s/tines-3b-users		0a1bc234
2026/07/29 22:26	a907734abece Add driver ABI version registration and support for MMNCCD ioctls		2377cd3d
2026/07/29 10:20	43396a19255c Enable 8-shard parallel execution for integration tests in Buildkite.		b63596d1
2026/07/28 22:19	87dc2c081866 Fix TSan data race in UDP Socket Tests		19622d9d
2026/07/28 10:16	41cfc418a32b Internal change		5fe7c56f
2026/07/27 22:03	ca42882317b2 Automated rollback of changelist 952215192		45ae1df4
2026/07/27 18:21	ca42882317b2 Automated rollback of changelist 952215192		1f273138
2026/07/27 10:00	8eb8f9e0df89 Restrict MaxPerms to not include Write access if the segment was attached as read-only		1f273138
2026/07/25 00:01	8eb8f9e0df89 Restrict MaxPerms to not include Write access if the segment was attached as read-only		492bab15
2026/07/24 11:54	607ea0040826 seccheck: fix dispatcher array order		dd737a83
2026/07/24 10:58	607ea0040826 seccheck: fix dispatcher array order		544adce9
2026/07/23 21:47	42f4b4bbe596 Add SandboxExec Go binding for sandbox working directory		544adce9
2026/07/23 09:41	3f1f8f20c8d3 Merge pull request #13812 from EtiennePerot:sidecar-enforcement		71a13572
2026/07/22 21:34	5c0fc10867c2 Merge pull request #13790 from EtiennePerot:runsc-install-download		881ce5c2
2026/07/22 09:28	ed9299c797a9 Merge pull request #13655 from a7i:feat/cgroup2-xattr		4a865b71
2026/07/21 21:46	0833ac241841 Implement custom TaskService (proto and ttrpc server) in task_server.		b561ce9c
2026/07/21 21:24	9f653e577965 Nftables: Fix and enable syscall-native tests for runc.		b561ce9c
2026/07/21 09:26	9f653e577965 Nftables: Fix and enable syscall-native tests for runc.		7c5de9c3
2026/07/20 20:30	9d2d13b051fc hostinet: support checkpoint/restore		de6a700d
2026/07/20 15:48	9d2d13b051fc hostinet: support checkpoint/restore		4763fed7
2026/07/20 08:27	ddf37c50b366 nvproxy: Register NVIDIA GPU driver version 580.173.02.		4763fed7
2026/07/18 22:27	ddf37c50b366 nvproxy: Register NVIDIA GPU driver version 580.173.02.		72524a66
2026/07/18 09:18	eb7b0b4c1a84 Merge pull request #13674 from EtiennePerot:gvisor-in-docker-fix		72524a66
2026/07/17 20:07	cde30cd807b0 Add seccheck field to indicate if a file is on an overlayfs lower layer.		72524a66
2026/07/17 08:01	de314aba841d Deflake TestDockerWithVFS by using isolated build contexts.		7f27c57a
2026/07/16 20:00	7824e269ebd3 Support cgroup namespaces		6ca2b51a
2026/07/16 07:56	c30a6d1b6f26 use official docker:dind image for basic/docker image.		851bd571
2026/07/15 19:47	cd4bd6b9861f Add seccheck support for collecting stdin/stdout/stderr info on execve.		27a8bd60
2026/07/15 07:40	c07053c7dbd9 Merge pull request #13682 from EtiennePerot:systrap-false-sharing		a4ed0f4f
2026/07/15 03:28	c07053c7dbd9 Merge pull request #13682 from EtiennePerot:systrap-false-sharing		2130f682
2026/07/14 14:18	9cb44186726e Support nr_blocks mount option in tmpfs.		2130f682
2026/07/14 01:08	cd0aa582c862 website: register fuse user guide doc		2130f682
2026/07/13 19:27	6d73c10d795c Refactor network configuration during restore and defer link creation in runsc		2130f682
2026/07/13 07:24	6d73c10d795c Refactor network configuration during restore and defer link creation in runsc		a870962e
2026/07/11 14:26	6d73c10d795c Refactor network configuration during restore and defer link creation in runsc		d78ea535
2026/07/11 01:15	e13d5f99e04a Remove CUDA 12.2 tests from release/continuous pipelines.		d78ea535
2026/07/10 13:05	37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record.		99e64375
2026/07/10 12:26	37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record.		4167ee25
2026/07/09 23:18	c0af8b157f66 Fix double close of fds in FDWriter.Close		4167ee25
2026/07/09 11:15	a5d30fe182f6 Support epoll() for /proc/[pid]/mountinfo and /proc/[pid]/mounts		a0c310a3
2026/07/08 23:10	0f2dd31f6f09 Add a "runsc read" command to read files from a sandbox.		b9f1ceaa
2026/07/08 11:07	a29997e6c741 Register NVIDIA driver version 615.15.00 in nvproxy.		ab40da58
2026/07/07 23:03	2b6dff7c5a98 Add python language binding for runsc.		88a4b44c
2026/07/07 11:01	35db98496ee1 clone: Deliver pidfd only after child init		76cdc0c0
2026/07/06 22:58	f8496e3731e8 Merge pull request #13526 from TristanInSec:fix-udp-checksum-zero-nat		8e71ce95
2026/07/06 19:38	f8496e3731e8 Merge pull request #13526 from TristanInSec:fix-udp-checksum-zero-nat		88b240e4
2026/07/06 10:57	abf59273b7ba Refactor setting up network during restore.		88b240e4
2026/07/04 01:42	abf59273b7ba Refactor setting up network during restore.		fcece630
2026/07/03 13:41	abf59273b7ba Refactor setting up network during restore.		aa437a8a
2026/07/03 01:39	abf59273b7ba Refactor setting up network during restore.		58bf2096
2026/07/02 13:34	abf59273b7ba Refactor setting up network during restore.		2b70b115
2026/07/02 01:32	abf59273b7ba Refactor setting up network during restore.		27192279
2026/07/01 13:30	df56fdbc6497 Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr		5fb9973c
2026/07/01 12:06	df56fdbc6497 Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr		00a5cf1c
2026/06/30 22:59	31c3363db7b0 Merge pull request #13426 from google:lucasmanning/fuse-host-passthrough		00a5cf1c
2026/06/30 10:56	215343893be4 Merge pull request #13214 from ibondarenko1:tcpip-ipv6-disablelocked-isenabled		e5173a01
2026/06/29 22:20	2f93121f3b28 Publish sandbox go sdk to go branch.		fff8d0a0
2026/06/29 18:23	2f93121f3b28 Publish sandbox go sdk to go branch.		6a0c72dc
2026/06/29 10:18	928199eb9fb2 Merge pull request #13555 from yaseenisolated:fix-tcp-runqueue-restore		6a0c72dc
2026/06/27 03:16	928199eb9fb2 Merge pull request #13555 from yaseenisolated:fix-tcp-runqueue-restore		fb92f11c
2026/06/26 14:11	d7ea6bc1ded1 Merge pull request #13451 from relkochta:relkochta/fsconfigreconf		fb92f11c
2026/06/26 11:03	d7ea6bc1ded1 Merge pull request #13451 from relkochta:relkochta/fsconfigreconf		7ff32d8b
2026/06/25 21:49	5ba3eaee4ac7 Deflake the native memfd test		7ff32d8b
2026/06/25 09:47	ea0f0b6b32d9 Remap nvproxy devices across save/restore.		432fd51a
2026/06/24 21:49	b11424acec0a Scale CVE chart bars based on the maximum number of CVEs in any year.		cfa969bf
2026/06/24 09:46	764efd2d14ca Add gvisor security record to the gvisor.dev		c1da772e
2026/06/23 21:47	9f8f6c917885 Merge pull request #13534 from lyphyser:park-watchdog		042555ff
2026/06/23 09:38	0c3db239f156 Add checkpoint sandbox helper functions to gVisor shim.		4b1d8f01
2026/06/22 21:34	838a7e77509b Nftables: Added support for `set` creation.		5a630be6
2026/06/22 18:34	838a7e77509b Nftables: Added support for `set` creation.		ab2703f0
2026/06/22 09:32	57746fa99e6b Update UTS namespace hostname/domainname on restore.		ab2703f0
2026/06/19 22:42	57746fa99e6b Update UTS namespace hostname/domainname on restore.		43bfcdb0
2026/06/19 10:37	f0ef4a8366d0 Add Northflank to the gVisor users page.		023e42b5
2026/06/18 22:35	e5697b80cabb Merge pull request #13484 from luiscape:luis/add-mps-support-nvproxy		d7ffd47b
2026/06/18 11:57	9307ff8f53c4 Merge pull request #13469 from lyphyser:disable-fast-path		4f06757f
2026/06/17 22:43	d2d6f9c4140b Prevent TOCTOU in VFIO_DEVICE_SET_IRQS ioctl.		4f06757f
2026/06/17 09:37	2cb805740e93 Nftables: Fixed bugs.		4f06757f
2026/06/16 20:27	2b2f4205a4d3 Merge pull request #13407 from moraneus:fix/nft-nat-family-mismatch		4f06757f
2026/06/16 07:14	8dfc7106337a Relocate go_binding_test to sandbox_test.		4f06757f
2026/06/15 18:07	c708da162364 Implement MS_MOVE for mount(2)		4f06757f
2026/06/13 11:57	57efc92f6df8 nvproxy: Add support for NVIDIA driver version 610.43.02.		4f06757f
2026/06/12 22:46	d9e49db5d861 Merge pull request #13421 from benldrmn:fix-annotation-override-ordering		4f06757f
2026/06/12 10:39	cb94f02180f4 Merge pull request #13427 from milantracy:claude		8f6cdf3b
2026/06/11 22:40	d127ea02e002 Merge pull request #13276 from Haihan-Jiang:codex/gvisor-cgroup-swap		e93da63e
2026/06/11 10:34	62f5e2a90b92 Merge pull request #13410 from relkochta:relkochta/tmpfsnoswap		d93a6ab6
2026/06/10 22:30	433b2ebcf032 Nftables: Added attribute array validator.		b754d2d8
2026/06/10 10:31	7179c5f2f959 Add option to run cuda-checkpoint sequentially.		f79bac11
2026/06/09 22:26	f028e6a84187 Nftables: Added support for NAT.		34dab4be
2026/06/09 10:24	6b0a7ff6a099 Automated rollback of changelist 928766376		c36c07f6
2026/06/09 09:33	6b0a7ff6a099 Automated rollback of changelist 928766376		656e94c6
2026/06/08 20:26	7f3d9935e2e8 Merge pull request #13315 from tianyuzhou95:albert/upstream-packet-fanout-uniqueid		656e94c6
2026/06/08 14:02	cfb7c0629521 Fix SIGWINCH delivery on PTY window size change (TIOCSWINSZ)		656e94c6
2026/06/06 10:29	cfb7c0629521 Fix SIGWINCH delivery on PTY window size change (TIOCSWINSZ)		cc095639
2026/06/05 21:19	da03d3a66063 Remove stale sha256 pin from google_root_pem.		cc095639
2026/06/05 09:17	fcd95d5fac0f Merge pull request #13164 from ibondarenko1:hardening/tcp-isn-secrets-nosave		48b6c3fa
2026/06/05 01:03	0e42bbeaef1c Merge pull request #13324 from tianyuzhou95:albert/fix-bigdatatransfer-port-exhaustion		197909be
2026/06/04 11:49	810eac7d0f1d nvproxy: Mark 580.159.04 driver supported.		197909be
2026/06/03 22:38	5fcf887cdc85 ipv6: Fixed fragment packet re-assembly.		197909be
2026/06/03 10:33	6f0c12599d8b Internal change.		234057e5
2026/06/02 22:31	d1c3ea4c0790 Implement ENV_VAR_POLICY_UNSET properly in sandboxexec.		3c0d2131
2026/06/02 10:29	752de092a1e0 Avoid panic on unknown transport protocol during forwarding.		62fe1528
2026/06/02 08:49	752de092a1e0 Avoid panic on unknown transport protocol during forwarding.		1095583b
2026/06/01 19:48	254f7e747c27 runsc features: Declare mount ID-mapping support in runtime features		1095583b
2026/06/01 18:09	254f7e747c27 runsc features: Declare mount ID-mapping support in runtime features		8d8eeb3a
2026/06/01 07:45	50af291e777f Fail GPU tests if driver installation fails.		8d8eeb3a
2026/05/30 12:21	50af291e777f Fail GPU tests if driver installation fails.		6b4a8443
2026/05/29 23:14	e8af18d0c9e4 runsc: support for mount uid/gid mappings		6b4a8443
2026/05/29 21:50	086c94e0cc43 Fix: Improve error messages in spec validation for Spec.Process and Spec.Linux.		6b4a8443
2026/05/29 09:49	086c94e0cc43 Fix: Improve error messages in spec validation for Spec.Process and Spec.Linux.		a3d70215
2026/05/28 21:48	d4947eeb81ca Untag pointer for getmempolicy		4624854e
2026/05/28 09:49	9b9807a3c82d Fix sentry panic during path resolution from unlinked directories in tmpfs.		9a5a7e5e
2026/05/27 21:47	852e260897f8 Deflake TestCreateSandboxWithContainer in shim/tests:shim_test.		4c36e7e5
2026/05/27 09:40	2923488e2bcb Internal change.		cb4e87ff
2026/05/27 09:03	2923488e2bcb Internal change.		2b01f00e
2026/05/26 19:58	ef599f18a9ea Increase minimum Go version to 1.26.3		2b01f00e
2026/05/26 19:21	ef599f18a9ea Increase minimum Go version to 1.26.3		13258365
2026/05/26 07:55	85b606a040c1 Clip resource limits in startup benchmarks.		13258365
2026/05/23 10:15	85b606a040c1 Clip resource limits in startup benchmarks.		c69befb3
2026/05/22 21:03	27b70bccdcb9 Merge pull request #12614 from aojea:kind_kubernetes		c69befb3
2026/05/22 08:58	a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount		fbbd21af
2026/05/21 20:59	6fd4550f7f41 Nftables: Use enum instead of strings for nft ops.		70ae9b03
2026/05/21 08:55	3a1eb255338f Fix EINTR leakage by correcting type comparison in ConvertIntr.		747d777d
2026/05/20 20:51	0e7a047ef3b7 nvproxy: don't use rmControlSimple in ctrlGpuExecRegOps		41b8c833
2026/05/20 08:49	d8751e5ab677 Merge pull request #13181 from ibondarenko1:hardening/conntrack-seed-nosave		585486f8
2026/05/19 20:46	7851a7f7167b Merge pull request #13147 from shayonj:setgroups-impl		6cd1a940
2026/05/19 08:43	eddc5fa62b5b Add unit test for GetPersistentVolume		2aa09d96
2026/05/18 20:45	3587f0d82c7a Merge pull request #13163 from arpitjain099:ci/add-permissions		9f74d399
2026/05/18 08:38	8bcb288c846d Add a new flag to allow connected connections on save.		143ffb88
2026/05/18 06:37	8bcb288c846d Add a new flag to allow connected connections on save.		de5aae85
2026/05/17 05:47	77dbc433352e Fix broken deps.		de5aae85
2026/05/16 19:45	fb5ef644a797 lisafs: Allow connections to have varying implementations.		de5aae85
2026/05/16 07:48	fb5ef644a797 lisafs: Allow connections to have varying implementations.		a15a64a6
2026/05/15 19:48	b798cf6112e7 Integrate runsc shim with containerd 2.1.		81fb92f3
2026/05/15 07:40	7e7d35b8a0ae Use a fresh container for exclusive GPU test execution.		9cd3beaa
2026/05/14 21:49	b8c7531eee0b Merge pull request #13185 from drewmacneil:drew/tmpfs-symlink-account-pages		6ccb967e
2026/05/14 08:38	95d42c1e46c7 Don't run SeccompValidatesAllFilterFlags on starnix		6ccb967e
2026/05/13 20:34	dc2aeec97118 tmpfs: support percentage size + update /proc/self/mounts to match Linux format		e8909b29
2026/05/13 08:31	b29453378bdd Merge pull request #13099 from shayonj:s/per-mount-directfs		fec2a7ee
2026/05/12 19:40	1013f4dc0dfa clone: Uninstall pidfd when seccheck aborts clone		a0949470
2026/05/12 18:58	f5ce408bcf1e nvproxy: don't use rmControlSimple in ctrlGetNvU32List		a0949470
2026/05/12 06:57	f5ce408bcf1e nvproxy: don't use rmControlSimple in ctrlGetNvU32List		07aeade5
2026/05/11 18:14	d281a82b8c2b Set DF bit for TCP handshake.		d168f260
2026/05/11 17:35	d281a82b8c2b Set DF bit for TCP handshake.		845acb1c
2026/05/11 06:11	8c9871efe45a Skip TestShimGroupingPerformance in containerd-test.		845acb1c
2026/05/09 09:41	8c9871efe45a Skip TestShimGroupingPerformance in containerd-test.		29233ece
2026/05/08 20:27	07ebf7a12283 Always specify Docker platform in images.mk		29233ece
2026/05/08 08:25	58ca0022967b sentry: Move IOUringEnabled to kernel.Kernel Member		5633175a
2026/05/04 07:35	f395c7e409ad Merge llm benchmark client images to one image.		85f1bcf2
2026/05/02 07:11	f395c7e409ad Merge llm benchmark client images to one image.		a0d91488
2026/05/02 00:20	f395c7e409ad Merge llm benchmark client images to one image.		753c55b9
2026/05/01 11:10	f6f900361dae Merge pull request #12791 from a7i:feat/shim-containerd-update		753c55b9
2026/04/30 22:02	51a3f690dc22 Implement pidfds		753c55b9
2026/04/30 09:57	cb8d273a098b Refactor common LLM testing utilities into llmutil.		d926feac
2026/04/30 09:54	cb8d273a098b Refactor common LLM testing utilities into llmutil.		005438fc
2026/04/29 20:41	3aa4a4fc83f1 [tests] Ignore SIGPIPE in fork_benchmark		005438fc
2026/04/29 08:42	a655402183e0 Internal change		7ca9e4d8
2026/04/28 20:39	79b7318d6d6e Change default checkpoint compression to "none".		95008c03
2026/04/28 08:34	00af7dba072a Revert the debug logs added for investigating the nil receiver in Readiness.		340bcdf0
2026/04/27 20:32	8e1b8ebdafc1 Merge pull request #13016 from tanyifeng:bump-linux-release		ce741359
2026/04/27 18:50	8e1b8ebdafc1 Merge pull request #13016 from tanyifeng:bump-linux-release		0f700595
2026/04/27 08:29	6c584bd2fd0e gVisor blog post: Fix publication year in URL.		0f700595
2026/04/25 08:54	6c584bd2fd0e gVisor blog post: Fix publication year in URL.		9c2d0995
2026/04/24 19:47	c941cbac224e Add a sync.Pool for sendfile buffers.		9c2d0995
2026/04/24 14:03	95eb8fa6e7a6 Merge pull request #12995 from tanyifeng:tencent-blog		9c2d0995
2026/04/24 02:04	95eb8fa6e7a6 Merge pull request #12995 from tanyifeng:tencent-blog		9cfb3ca7
2026/04/23 17:19	49a67f0580c5 Run more mount tests with overlayfs enabled.		629ff21a
2026/04/23 13:58	b2b5c32399dd conntrack: Moving packet functions from conntrack to packet_buffer		629ff21a
2026/04/23 01:56	b2b5c32399dd conntrack: Moving packet functions from conntrack to packet_buffer		b10da5ec
2026/04/22 17:38	f4da28bc0a62 Remove usages of save-restore-netstack flag.		0e869ba2
2026/04/22 13:53	580553b31b48 Clarify container capabilities in Docker-in-gVisor tutorials.		0e869ba2
2026/04/22 01:54	580553b31b48 Clarify container capabilities in Docker-in-gVisor tutorials.		0b6ab7ec
2026/04/21 13:53	25ee8c385cdf Merge pull request #12923 from shayonj:s/export-gofer-mount-setup		9765efe0
2026/04/21 01:46	afbd83b06878 overlay: avoid creating unnecessary whiteouts in UnlinkAt and RmdirAt		3f2e655b
2026/04/20 19:25	afbd83b06878 overlay: avoid creating unnecessary whiteouts in UnlinkAt and RmdirAt		e65da4ee
2026/04/20 13:44	03f43620b1df Clean up all containers, pods, sandboxes once root tests are completed.		e65da4ee
2026/04/19 00:42	03f43620b1df Clean up all containers, pods, sandboxes once root tests are completed.		303e2802
2026/04/18 14:20	ebc66e608932 Document docker v28 in GKE sandox support.		303e2802
2026/04/18 02:22	ebc66e608932 Document docker v28 in GKE sandox support.		5be7a9de
2026/04/17 14:16	948b81074120 stack: Separated NAT code from conntrack.		24ecfc1e
2026/04/17 11:40	948b81074120 stack: Separated NAT code from conntrack.		de0a551d
2026/04/16 22:28	ec13dd2435d5 Merge pull request #12797 from insanitybit:overlay-userxattr		de0a551d
2026/04/16 10:23	b5e83db38775 Merge pull request #12855 from tanyifeng:pty-sighup-on-master-close		4743f87d
2026/04/15 22:22	486f37f2f419 Test gVisor with latest containerd minor versions.		df15c5f3
2026/04/15 10:16	098b0a1fd48d Internal change.		294e3145
2026/04/14 22:17	8165ec8fae29 Exclude debug-related flag annotations from checkpoint/restore validation.		e2e976a8
2026/04/14 10:11	58b37effb58e Merge pull request #12919 from iTrooz:iface_index		362d1323
2026/04/13 22:09	ab52a706a050 Merge pull request #12905 from danielpfeifer02:dpfeifer/runsc-kill-pgid		1a086e7c
2026/04/13 18:26	ab52a706a050 Merge pull request #12905 from danielpfeifer02:dpfeifer/runsc-kill-pgid		9530ccf9
2026/04/13 10:05	7a8f93e881db Internal change.		9530ccf9
2026/04/11 18:48	7a8f93e881db Internal change.		38c8e246
2026/04/11 05:38	00a38c0da811 Merge pull request #12902 from shayonj:s/export-gofer-helpers		38c8e246
2026/04/10 16:32	b024e9775767 Merge pull request #12909 from xiangbin-hu:cgroup-registry-remove-on-rmdir		38c8e246
2026/04/10 03:24	da7e03a42765 Merge pull request #12854 from tanyifeng:vfs-add-inmodify		38c8e246
2026/04/09 14:11	7b4fe744c3d1 Merge pull request #12843 from kpurdon:kpurdon/12838/fix-aarch64-oom-reporting		38c8e246
2026/04/09 00:58	9bc8526be8df Merge pull request #12863 from tanyifeng:remove-ficlone-tests		38c8e246
2026/04/08 12:54	50a14dc95f47 Remove vfio_unsafe.go and use VFIOIrqSet.SizeBytes().		d9b7f621
2026/04/08 11:23	50a14dc95f47 Remove vfio_unsafe.go and use VFIOIrqSet.SizeBytes().		2c961e87
2026/04/07 22:12	7eb858fdd6f5 kvm: re-enable the TestMemLimit		2c961e87
2026/04/07 10:10	140f64c5bad5 Merge pull request #12817 from luiscape:add-vulakn-ioctls		628666c6
2026/04/07 09:57	140f64c5bad5 Merge pull request #12817 from luiscape:add-vulakn-ioctls		4440e7c2
2026/04/06 20:43	9572729eab49 Update links to GKE Sandbox documentation page.		4440e7c2
2026/04/04 00:13	0f29b0e1e7fa Merge pull request #12852 from tanyifeng:net-ip-mtu-discover		4440e7c2
2026/04/03 11:08	44183dc080fa Allow sub-containers to cold-start on restored Pods.		4440e7c2
2026/04/02 21:53	d1ab4fa9f386 gVisor security policy: Clarifications and update for `InternalEsc`.		4440e7c2
2026/04/02 20:52	4eeb78049896 mm: only hugepage-align mappings of hugepage-aligned length		4440e7c2
2026/04/02 08:53	4eeb78049896 mm: only hugepage-align mappings of hugepage-aligned length		91bc79b0
2026/04/02 01:52	28a0852fcb34 Merge pull request #12634 from pawannn:master		0285fe54
2026/04/01 12:36	305818798603 sentry: use cryptographic PRNG for security-sensitive randomization		0285fe54
2026/04/01 00:32	5d857245b684 vfs: clear temporary notReady lists		fb8b2c26
2026/03/31 12:30	3479ded64d64 runsc: Fix SetUserMappings to handle empty UID/GID mappings in spec.		aeea1c72
2026/03/31 00:27	dc29295285b2 nftables: Fix evaluation order for IP/IP6/Inet.		d0af506e
2026/03/30 17:50	77458736f496 Nftables: Remove the overheads from register ops.		458630d8
2026/03/30 12:25	d23cf24593c3 utimensat: Allow AT_EMPTY_PATH		458630d8
2026/03/28 07:54	d23cf24593c3 utimensat: Allow AT_EMPTY_PATH		158c21af
2026/03/27 18:44	749146131869 Fix systemcall tests		158c21af
2026/03/27 11:43	d2403f237047 Extend containerd runsc shim testing.		158c21af
2026/03/26 23:42	d2403f237047 Extend containerd runsc shim testing.		50cdcaa1
2026/03/26 11:34	c85244f0aaa2 netstack: Fix cap check around IFLA_NET_NS_FD		4b3d9a38
2026/03/25 23:32	147cf2057db4 Internal change.		c6143aac
2026/03/25 18:12	147cf2057db4 Internal change.		4367a094
2026/03/25 11:30	c84e2b3c916c Add new extension method to support shim grouping.		4367a094
2026/03/24 23:32	c84e2b3c916c Add new extension method to support shim grouping.		b4723e5f
2026/03/24 11:31	7fa0acf9f27f Merge pull request #12772 from tanyifeng:fix-path-resolve		74e70d19
2026/03/23 23:24	3a5311091c1c Merge pull request #12734 from luiscape:master		baf8bf12
2026/03/23 18:03	3a5311091c1c Merge pull request #12734 from luiscape:master		5e3db351
2026/03/23 11:21	5632a4febdb3 Merge pull request #12633 from danielnorberg:fix-tar-rootfs-upper-opaque-xattr		5e3db351
2026/03/21 18:30	5632a4febdb3 Merge pull request #12633 from danielnorberg:fix-tar-rootfs-upper-opaque-xattr		5b92003d
2026/03/21 01:37	afa183ad4a0f Add runsc wait --fscheckpoint/fsrestore.		5b92003d
2026/03/20 13:34	0ee4bfc55de7 Merge pull request #12758 from Bingtagui404:fix/proc-pid-io-rchar-typo		85bf2a64
2026/03/20 12:53	0ee4bfc55de7 Merge pull request #12758 from Bingtagui404:fix/proc-pid-io-rchar-typo		2f245add
2026/03/19 23:47	bf19fbd37580 runsc/shim: Add support for filesystem restore.		2f245add
2026/03/19 22:42	9ca1678bc676 Implement filesystem-only checkpointing.		2f245add
2026/03/19 10:43	9ca1678bc676 Implement filesystem-only checkpointing.		522d580f
2026/03/18 23:27	ac8ff8fd1a6b Fix more printf findings		0199f9a1
2026/03/18 10:16	f7324fa64c1d signals: Fix races that prevent a SIGCONT from aborting a SIGSTOP		0199f9a1
2026/03/18 08:47	f7324fa64c1d signals: Fix races that prevent a SIGCONT from aborting a SIGSTOP		c8810548
2026/03/17 19:42	70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as.		c8810548
2026/03/17 07:35	c7907727f5af Automated rollback of changelist 879883699		c01bca74
2026/03/16 19:30	df21591966b8 [tests] Remove direct dependency on linux_capability_util		0737c18f
2026/03/16 16:06	df21591966b8 [tests] Remove direct dependency on linux_capability_util		64e21424
2026/03/16 07:26	93555402076d Merge pull request #12589 from jbms:tcgets2		64e21424
2026/03/15 04:43	93555402076d Merge pull request #12589 from jbms:tcgets2		ee8d34d6
2026/03/14 02:00	7115280528d6 Symbolize and desymbolize the stacktrace in beforeSave and afterLoad.		ee8d34d6
2026/03/13 13:48	e8a5075fec21 nogo: remove stdlib subcommand		351cb5cf
2026/03/13 11:10	e8a5075fec21 nogo: remove stdlib subcommand		2f7f359d
2026/03/12 22:00	8fb8dca779fd Merge pull request #12694 from Cossack9989:support_va_bits_39_and_52_under_systrap		2f7f359d
2026/03/12 09:55	293707e850ca Merge pull request #12686 from a7i:fix/iptables-restore-ipt-so-set-replace-12685		4efadf07
2026/03/11 21:57	209337ec6309 Do not create profile/trace files if they are not set.		2d88ab01
2026/03/11 12:53	f3f3086cd269 Deflake //test/syscalls:packet_mmap_test_native.		2d88ab01
2026/03/11 00:52	f3f3086cd269 Deflake //test/syscalls:packet_mmap_test_native.		86914af9
2026/03/10 12:51	c9735035b4c6 Update Have[RawIP/Packet]SocketCapability() to open raw/packet sockets.		4683d576
2026/03/10 00:45	498c3ed97f23 Merge pull request #12689 from KevinZhao:fix/nvproxy-size-validation		6972f302
2026/03/09 19:08	498c3ed97f23 Merge pull request #12689 from KevinZhao:fix/nvproxy-size-validation		176bead5
2026/03/09 12:44	527012b63ce4 Internal change.		176bead5
2026/03/07 13:11	527012b63ce4 Internal change.		5cb44a80
2026/03/07 00:05	56114d1c6cd3 compressio: Handle zero-length non-nil key.		5cb44a80
2026/03/06 23:01	8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty.		5cb44a80
2026/03/06 10:59	8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty.		41d8037d
2026/03/05 23:02	8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty.		31e9c887
2026/03/05 10:57	0841f58d1889 Add --per-pod-flag-override to gvisor-k8s-tool install.		d20b04c8
2026/03/04 22:55	0a1bb9057526 Internal change		a9fe5c9e
2026/03/04 21:14	0a1bb9057526 Internal change		e6b6b96b
2026/03/04 10:53	4e233fa6bc7b Internal change.		e6b6b96b
2026/03/04 02:23	4e233fa6bc7b Internal change.		4180d919
2026/03/03 13:16	d68b68cd0e44 Fix runsc log and profile file handling.		4180d919
2026/03/03 00:39	ec013ff364dc Create initial sandbox configuration spec.		28b83e23
2026/03/03 00:17	a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date		28b83e23
2026/03/02 12:14	a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date		b9dd6534
2026/02/28 15:22	a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date		43249bac
2026/02/28 02:21	d5a453ca03ba Merge pull request #12447 from danielnorberg:fix-bind-mount-type-validation		43249bac
2026/02/27 20:59	d5a453ca03ba Merge pull request #12447 from danielnorberg:fix-bind-mount-type-validation		2cf092b8
2026/02/27 14:18	d676cf1324d0 nvproxy: Add support for 590.48.01.		2cf092b8
2026/02/27 06:08	d676cf1324d0 nvproxy: Add support for 590.48.01.		a2f13f71
2026/02/26 22:06	6ee74522ca38 Add more shim grouping tests.		a2f13f71
2026/02/26 10:06	6ee74522ca38 Add more shim grouping tests.		ffa54287
2026/02/25 22:03	e7b87edeb27a Translate StartSubcontainer to RestoreSubcontainer on a restoring sandbox.		e0f78d93
2026/02/25 10:04	c58e543f3da5 Reject unsupported file types in directfs.		c162cde9
2026/02/24 22:00	794768df21a3 Get go version for nogo from a helper function.		787dfb7c
2026/02/24 09:56	e41477ffa935 Internal change.		96b1aa46
2026/02/23 21:53	7551ab05d9b4 `runsc metric-server`: Tag metrics as per-sandbox vs process-wide.		41d2fa6a
2026/02/23 19:52	7551ab05d9b4 `runsc metric-server`: Tag metrics as per-sandbox vs process-wide.		7c9658af
2026/02/23 09:51	eb261c6145d1 gofer: Improve restore failure messages.		7c9658af
2026/02/21 02:40	eb261c6145d1 gofer: Improve restore failure messages.		6e7b5511
2026/02/20 20:04	2ba75b93bf8e Merge pull request #12598 from tamird:nogo-more-checks		741f5161
2026/02/20 14:35	1985b831b991 Do not panic if RegisterPacketEndpoint failed during restore.		741f5161
2026/02/20 02:37	1985b831b991 Do not panic if RegisterPacketEndpoint failed during restore.		17d780d6
2026/02/19 17:52	d473cc236bf8 Add "debug-command" to allowlist for annotation-based flag override.		73a252ac
2026/02/19 14:31	c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.		73a252ac
2026/02/19 02:34	c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.		746545b8
2026/02/18 15:33	27046a53aa92 Merge pull request #12607 from quetz:tcp-sack-btreeg		77d4d919
2026/02/18 14:28	7ce75cc793ca hostinet: Replacing Seek with ReadAt.		77d4d919
2026/02/18 02:09	7ce75cc793ca hostinet: Replacing Seek with ReadAt.		39751c21
2026/02/17 18:03	3f6a9614cc76 Add a method for stopping external network access while a sandbox is running.		4db8fa92
2026/02/17 14:02	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.		4db8fa92
2026/02/17 01:59	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.		e439b951
2026/02/16 13:57	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.		84656fa6
2026/02/14 04:56	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.		1e62d198
2026/02/13 15:46	67ff7826fdd7 Add a metric to track the presence of the metric server.		1e62d198
2026/02/13 03:29	6f7d12cf8e3b Add `compUtil` capability to several nvproxy control commands.		6a673c50
2026/02/12 22:28	6f7d12cf8e3b Add `compUtil` capability to several nvproxy control commands.		504cb1bf
2026/02/12 15:27	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).		504cb1bf
2026/02/11 22:15	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).		76a109e2
2026/02/11 10:11	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).		75707236
2026/02/10 22:07	2239fe6fb93a `seccomp`: Refactor to allow arbitrary number of `RuleSet`s.		441e25b7
2026/02/10 19:46	2239fe6fb93a `seccomp`: Refactor to allow arbitrary number of `RuleSet`s.		a076df6f
2026/02/10 10:05	9fb1260a5885 Internal change.		a076df6f
2026/02/09 22:02	9fb1260a5885 Internal change.		4ab09a02
2026/02/09 09:58	9fb1260a5885 Internal change.		df949cd9
2026/02/08 22:35	9fb1260a5885 Internal change.		4c131dc4
2026/02/08 09:25	5a038ae86d68 runsc: Refactor cli.Run to accept commands map		4c131dc4
2026/02/07 17:24	3967795e1aa0 Merge pull request #12577 from tanyifeng:fix-return-rst		4c131dc4
2026/02/06 23:45	3967795e1aa0 Merge pull request #12577 from tanyifeng:fix-return-rst		f20fc9f9
2026/02/06 11:40	f586013d9ede Merge pull request #12567 from nt:claude/fix-turbine-orch-error-X0OIm		97745f52
2026/02/06 10:23	f586013d9ede Merge pull request #12567 from nt:claude/fix-turbine-orch-error-X0OIm		f03c4191
2026/02/05 21:13	387f0682d620 sockets: Bind get/set sockopts to socket types.		f03c4191
2026/02/05 11:30	7210e818e4ed Internal change.		4936e85c
2026/02/05 09:09	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.		4936e85c
2026/02/04 13:16	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.		ea10c935
2026/02/03 20:54	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.		42b01fab
2026/02/03 08:53	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.		6df4c87a
2026/02/03 08:48	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.		d78927dd
2026/02/02 19:47	f87a10ed3fc6 Merge pull request #12122 from google:dependabot/github_actions/actions/stale-10		d78927dd
2026/02/02 19:27	f87a10ed3fc6 Merge pull request #12122 from google:dependabot/github_actions/actions/stale-10		018ebef2
2026/02/02 07:45	9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl		018ebef2
2026/01/31 22:53	9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl		6b8752f2
2026/01/31 19:11	9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl		afc0c4d4
2026/01/31 10:50	cc6d75530246 Update spec validation for args.		afc0c4d4
2026/01/30 23:50	cc6d75530246 Update spec validation for args.		c75a2f6e
2026/01/30 22:49	5c79e3901d0a Improve logging and error handling in image tests		c75a2f6e
2026/01/30 10:47	5c79e3901d0a Improve logging and error handling in image tests		ea6dba22
2026/01/29 22:45	6b6332029773 Store the CPU time usage in the metadata during save operation.		bfa73b7b
2026/01/29 18:04	6b6332029773 Store the CPU time usage in the metadata during save operation.		aeb6fdd5
2026/01/29 10:43	5f31525f7613 Catch negative values in `timer_settime(2)`.		aeb6fdd5
2026/01/29 00:41	5f31525f7613 Catch negative values in `timer_settime(2)`.		0adc945e
2026/01/28 22:40	1f42df880e93 Speedup Ruby test and hopefully reduce its flakiness		0adc945e
2026/01/28 10:39	1f42df880e93 Speedup Ruby test and hopefully reduce its flakiness		004c195c
2026/01/27 23:37	2d45bac28a2a Merge pull request #12548 from ericpauley:stack-rlock		3029c699
2026/01/27 21:55	46ee21de717d arch: tolerate fpu.State.SanitizeUser errors during SignalRestore		3029c699
2026/01/27 09:56	46ee21de717d arch: tolerate fpu.State.SanitizeUser errors during SignalRestore		9a514c2f
2026/01/26 21:51	6399fd944357 gpu: Undeprecate --nvproxy-docker.		efb3e894
2026/01/26 19:10	6399fd944357 gpu: Undeprecate --nvproxy-docker.		a4c52dd6
2026/01/26 09:49	38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check		a4c52dd6
2026/01/25 20:37	38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check		55756628
2026/01/24 22:25	38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check		40acda8a
2026/01/24 09:15	7381ccc9a437 Add documentation for EROFS support in gVisor.		40acda8a
2026/01/23 21:13	15f0b1521fa2 Deprecate buffer pooling configuration and remove logic.		4f25b9b4
2026/01/23 09:10	1c7c74f919f4 test: deflake PreadvTest.MMConcurrencyStress save/restore tests on FUSE		43c7305e
2026/01/22 21:08	3b2df88855ea Deflake lisafs/testsuite.go		82c9c083
2026/01/22 09:05	a19380c9dd15 hostinet: avoid EPOLL_CTL_MOD syscalls from application poll()		a16aed1d
2026/01/21 21:02	e11531435fc9 Merge pull request #12521 from shouc:shou/fix-pf-oob-write		8fc37797
2026/01/21 08:59	7e430ef9582d kvm: handle mappings in the extended address space properly		6f1aa2f9
2026/01/20 22:38	9dd3da2ee883 nftables: Enable syscall native tests in buildkite.		2494e18d
2026/01/20 20:57	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.		2494e18d
2026/01/20 08:51	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.		300ecf9e
2026/01/19 20:49	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.		572effc1
2026/01/19 08:46	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.		45ab0e95
2026/01/17 03:43	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.		20d37d28
2026/01/16 10:53	eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service.		20d37d28
2026/01/15 22:50	5a068206c999 Merge pull request #12488 from Champ-Goblem:feature/sysfs-osrelease		722ac325
2026/01/15 10:48	271215a9575c Suspend fdnotifier during save/restore.		41cfbc00
2026/01/14 22:45	9bd108ff47b3 Merge pull request #12337 from mmishra100:mmishra/erofs_mount		be17c9cc
2026/01/14 10:45	e0a2f604cc9f Support TPU7x.		1b03c2cc
2026/01/07 22:43	7a397e306a31 Fix creds check in linkat(AT_EMPTY_PATH)		e14dbeb9
2026/01/07 09:33	aadcd20dfcf5 msgqueue: check permissions in Queue.Copy()		e14dbeb9
2026/01/06 20:23	8e2d907742f5 nftables: Added a generic method to extract attribute.		e14dbeb9
2026/01/06 07:16	534579b743fb watchdog: Add a "stuck goroutines" suffix to the full stack dump at panic		e14dbeb9
2026/01/05 18:03	63d8c3537a40 sentry/kernel: check for pending signals after Task.endInternalStopLocked()		e14dbeb9
2026/01/02 22:13	415991e5703d nftables: Added support for cmp op init.		e14dbeb9
2025/12/31 09:23	c8a1af2c00ca Fix execveat pathname construction when called on memfd.		e14dbeb9
2025/12/30 20:13	6c491f96d6bc Merge pull request #12411 from benldrmn:feat/serialize-rootfs-specific-container		e14dbeb9
2025/12/29 18:23	3ad5b57e0557 Add --tpu flag to `spec` subcommand for automatically adding TPU devices.		e14dbeb9
2025/12/26 22:53	3bc9fe48b39a Fix incorrect cap checks in pivotroot(), mbind(), and prctl()		e14dbeb9
2025/12/22 18:03	466fd4e909b6 memmap: Make NoMapInternal savable.		e14dbeb9
2025/12/20 19:32	89151a08e48f Internal change.		e14dbeb9
2025/12/20 06:23	9f6ccf11ca07 Exclude failing Java ConnectTimeout tests.		e14dbeb9
2025/12/19 17:13	333ec3e0c78c Automated Code Change		e14dbeb9
2025/12/18 21:32	515fb9e6bb4d netlink: Supply IFLA_MASTER in RTM_NEWLINK messages		e14dbeb9
2025/12/18 09:31	515fb9e6bb4d netlink: Supply IFLA_MASTER in RTM_NEWLINK messages		d6d0fdea
2025/12/17 10:52	515fb9e6bb4d netlink: Supply IFLA_MASTER in RTM_NEWLINK messages		a066d2bc
2025/12/16 21:41	f9423e9b6d1f Merge pull request #12368 from nicolasgarza:remove-slice-header		a066d2bc
2025/12/16 08:31	aaf09da3a68a Add a syscall test around unshare(CLONE_NEWUSER|CLONE_NEWNET)		a066d2bc
2025/12/15 19:25	0b9bde06d0f0 kvm: RSEQ: Add RSEQ support		a066d2bc
2025/12/13 10:52	e79ac3734065 Internal change.		a066d2bc
2025/12/12 21:41	6317c35bb75f Internal change		a066d2bc
2025/12/12 05:51	63343ff21f62 netlink: Check for CAP_NET_ADMIN in the netns-owning userns in send()		a066d2bc
2025/12/11 16:45	f77ef690d1d3 nftables: Added support for meta set and get/load init.		a066d2bc
2025/12/11 13:00	7e66b6cb36de tun: Check for cap in the netns-owning userns when creating tun		a066d2bc
2025/12/11 01:29	7e66b6cb36de tun: Check for cap in the netns-owning userns when creating tun		48b27acc
2025/12/10 12:19	4485bf5b2293 nvproxy: Add support for 580.105.08 driver.		48b27acc
2025/12/10 05:58	9a467482666b Fix a bug around IFLA_NET_NS_FD		48b27acc
2025/12/09 22:20	9a467482666b Fix a bug around IFLA_NET_NS_FD		fc20f974
2025/12/09 09:07	561ff6d235e6 proc: fix security checks on /proc/pid files		fc20f974
2025/12/08 19:56	2c31ec14a88a Add support for TPU7x Ghostfish.		fc20f974
2025/12/08 12:35	9d75d560f532 Make --allow-packet-socket-write a public flag.		fc20f974
2025/12/06 02:00	9d75d560f532 Make --allow-packet-socket-write a public flag.		cee4cb10
2025/12/05 12:50	c0bf1295ce8d Remove usage of net-disconnect-ok flag.		cee4cb10
2025/12/04 23:41	385d295b879e Remove pkg/shim/v1/runtimeoptions/v14 that supports containerd before v1.4.		cee4cb10
2025/12/04 06:42	5ebe823d4504 Prevent pollution in packet socket tests		cee4cb10
2025/12/03 09:18	5ebe823d4504 Prevent pollution in packet socket tests		98d1f71f
2025/12/01 21:54	5ebe823d4504 Prevent pollution in packet socket tests		d4611817
2025/12/01 19:30	5ebe823d4504 Prevent pollution in packet socket tests		3887d60d
2025/12/01 09:49	d25a12513bcf runsc: implement -h and -help flags		3887d60d
2025/11/29 01:13	d25a12513bcf runsc: implement -h and -help flags		01c07bfe
2025/11/28 13:10	d25a12513bcf runsc: implement -h and -help flags		d1b870e1
2025/11/26 23:18	d25a12513bcf runsc: implement -h and -help flags		e8331348
2025/11/26 11:15	bcd588ae5561 Update docs for preadv2/pwritev2 unsupported RWF flags.		c116feb4
2025/11/26 04:03	fe844bfed94d Leave nlmsg_pid at 0 for netlink multicast		64219f15
2025/11/25 14:52	fc40e232ff54 nftables: Added support for nla policy.		64219f15
2025/11/25 01:42	95f87697a897 Allow netlink sockets to send to RTMGRP_LINK		64219f15
2025/11/24 21:21	8bc2d00d53cc Internal change.		64219f15
2025/11/24 09:18	8bc2d00d53cc Internal change.		bf6fe8fe
2025/11/21 21:54	8bc2d00d53cc Internal change.		4fb8ef37
2025/11/21 09:51	43ca3989e6a7 Merge pull request #12117 from wangxinmian:go		52ed5c96
2025/11/20 21:48	486eeaa2bf2a Internal change.		280ea308
2025/11/20 09:47	daef357270bd sentry: don't try to dump/restore unsupported FPU states		2cc4c24a
2025/11/19 20:54	e3403becc1a2 Internal change.		26ee5237
2025/11/19 16:52	e3403becc1a2 Internal change.		82d7b894
2025/11/19 08:51	2d04b0468aa9 nftables: Parse chain type from the correct attribute.		82d7b894
2025/11/19 01:36	2d04b0468aa9 nftables: Parse chain type from the correct attribute.		ef766cd7
2025/11/18 12:25	2d94e669ae96 Avoid netlink deadlock		ef766cd7
2025/11/17 23:16	e2c42ec307c0 nftables: Changing HostToNet/NetToHost implementaion.		ef766cd7
2025/11/17 21:15	4304bcd596d8 Adjust runtime schedt.nmspinning offset for go1.26		ef766cd7
2025/11/17 11:37	4304bcd596d8 Adjust runtime schedt.nmspinning offset for go1.26		de73685d
2025/11/17 09:12	9fc4303aefe1 Panic if transport.connectionlessEndpoint.baseEndpoint.receiver is mutated during save.		de73685d
2025/11/15 04:29	9fc4303aefe1 Panic if transport.connectionlessEndpoint.baseEndpoint.receiver is mutated during save.		f7988ea4
2025/11/15 00:07	19abc451fac5 SGLang GKE test		f7988ea4
2025/11/14 12:06	19abc451fac5 SGLang GKE test		6d98c1c8
2025/11/14 03:42	fb338e73b424 Mark restore as failed when any runsc restore fails.		07e030de
2025/11/13 14:32	0f8351443c9f Handle restore failure more robustly.		07e030de
2025/11/13 01:22	c976ee8cb327 Add loader state checks for start commands.		07e030de
2025/11/12 12:21	197c0b33354c Test that adding an epoll to an epoll doesn't immediately wake the outer epoll		07e030de
2025/11/12 06:51	197c0b33354c Test that adding an epoll to an epoll doesn't immediately wake the outer epoll		4e1406b4
2025/11/11 17:41	d7915bc4a3dd Use the updated Docker image in ollama GKE tests.		4e1406b4
2025/11/08 07:11	cd0901c24964 kvm: add more debug info on unexpected exits		4e1406b4
2025/11/07 18:01	6792b9a5b3b9 Update kythe		4e1406b4
2025/11/07 04:31	20d10167be6f Fix: Pass stack pointer to `__init` in rseq arm64 test start.		4e1406b4
2025/11/06 15:30	605acfd94beb packetdrill: Fix packetdrill test script		4e1406b4
2025/11/06 13:38	605acfd94beb packetdrill: Fix packetdrill test script		a6c9c731
2025/11/06 00:28	c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation		a6c9c731
2025/11/05 07:38	6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests.		a6c9c731
2025/11/04 18:37	6d029e9844d0 Deflake docker in gVisor docker tests.		a6c9c731
2025/11/04 15:15	6d029e9844d0 Deflake docker in gVisor docker tests.		686bf657
2025/11/04 02:05	589c7630766b runsc/cgroup: don't no-op cgroupSystemd.Join() if unit exists		686bf657
2025/11/04 01:44	feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock		686bf657
2025/11/03 13:40	feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock		e6c64ba8
2025/10/31 07:15	feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock		2c50b6a9
2025/10/30 18:05	fe72162af296 Rework netfilter tests in preparation for running them on Buildkite.		2c50b6a9
2025/10/30 15:04	b7ef981f5ddb nvproxy: Add support for 535.274.02 and 570.195.03.		2c50b6a9
2025/10/29 22:29	b7ef981f5ddb nvproxy: Add support for 535.274.02 and 570.195.03.		fd2207e7
2025/10/29 00:40	909507170b70 Deflake //pkg/tcpip/stack:bridge_test.		fd2207e7
2025/10/28 11:30	d93c5f5ac2ad Add SGLang Docker tests/benchmark		fd2207e7
2025/10/27 22:20	a2af0eaa5412 eventfd: writes must be exactly 8 bytes		fd2207e7
2025/10/27 09:19	f611d7f195b7 Add checkpointExtra and checkpointOptsExtra.		fd2207e7
2025/10/24 10:31	f611d7f195b7 Add checkpointExtra and checkpointOptsExtra.		c0460fcd
2025/10/23 21:22	87373a837f6d runsc/cmd: fix unintended FD closing in gofer		c0460fcd
2025/10/23 07:51	8eca12250494 embeddedbinary: fix ForkExec flake		c0460fcd
2025/10/22 18:42	c952130ed502 bazel: Remove WORKSPACE again		c0460fcd
2025/10/22 14:40	2b0bc4aacd32 Add document for C/R wiht different CPU features.		c0460fcd
2025/10/22 05:30	2b0bc4aacd32 Add document for C/R wiht different CPU features.		252fbbad
2025/10/21 16:28	e88bc9236af9 Internal change.		252fbbad
2025/10/21 14:48	e88bc9236af9 Internal change.		9832ed61
2025/10/21 01:38	61f4c77225e1 Don't log warnings for incomplete Release requests in FUSE.		9832ed61
2025/10/20 18:16	df97ff95ff53 Do not close processors during save, but instead close during restore.		d422939c
2025/10/20 13:34	afee3faf017f platform/ptrace: return errors from switchToApp() rather than panicking		d422939c
2025/10/18 11:51	afee3faf017f platform/ptrace: return errors from switchToApp() rather than panicking		1c8c8cd8
2025/10/17 22:42	082860210e6b Merge pull request #12229 from dylanlanigansmith:dylanlanigansmith-fix-mknodFromTar-writing-empty-files		1c8c8cd8
2025/10/17 19:19	a46c37df6e40 runsc/cmd: set Statefile.Name() to "statefile"		1c8c8cd8
2025/10/17 07:17	a46c37df6e40 runsc/cmd: set Statefile.Name() to "statefile"		e18aa505
2025/10/17 02:54	a46c37df6e40 runsc/cmd: set Statefile.Name() to "statefile"		19568248
2025/10/16 13:44	923cb75d2443 Document how to snapshot rootfs tar and start a sandbox with the tar file.		19568248
2025/10/16 00:34	a730d6cf725b Enable rootfs only snapshot in runsc.		19568248
2025/10/15 12:32	b3f000ac172f Do not retry on invalid UDP send buffers		82df6b00
2025/10/14 23:56	be970bff650b stateio: tweak AsyncWriter.Finalize precondition		b6605ba8
2025/10/14 10:46	b2b828e91b9d Merge pull request #12217 from google:dependabot/github_actions/github/codeql-action-4		b6605ba8
2025/10/13 21:35	414716c8191b Skip Docker restore tests on Docker v28+.		b6605ba8
2025/10/13 10:34	b8da8ca2c0eb Internal change.		b6605ba8
2025/10/11 14:09	b8da8ca2c0eb Internal change.		ff1712fe
2025/10/11 01:00	828a10380162 Internal change.		ff1712fe
2025/10/10 11:49	ed08c26f3c56 Internal change.		ff1712fe
2025/10/09 22:48	6448c7bb13d3 Adjust WaitReasonSemacquire et al. for go1.26		ff1712fe
2025/10/09 17:16	6448c7bb13d3 Adjust WaitReasonSemacquire et al. for go1.26		7e2882b3
2025/10/08 22:46	0799336d64be Deflake IntervalTimerTest tests that relied on old kernel behavior.		7e2882b3
2025/10/07 15:44	6bf3c4885132 Internal change.		7e2882b3
2025/10/07 13:23	6bf3c4885132 Internal change.		8ef35d49
2025/10/07 00:14	903472a36836 Modify when FUSE_FLUSH is sent in FUSE implementation.		8ef35d49
2025/10/06 20:51	73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter		8ef35d49
2025/10/06 08:50	73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter		91305dbe
2025/10/04 11:25	73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter		49379ee0
2025/10/03 22:16	18edfee32572 Add async handler methods to FUSE DeviceFD.		49379ee0
2025/10/02 22:45	c7e2a2ab44b4 Check for EventRegister success before setting FileAsync.registered.		49379ee0
2025/10/02 09:35	5ad0647ea1a5 Restore WORKSPACE file.		49379ee0
2025/10/01 21:33	d660fbaa7edf Deny SOL_IP socket options for raw AF_INET6 sockets		267f56c6
2025/10/01 09:28	f943594ab08f Deflake the TestTcpdump image_test		3af39644
2025/10/01 00:15	48fd85092b41 Merge pull request #12184 from avagin:bazel-runtime-test-cache		65a0eece
2025/09/30 11:14	e1d2468af9c1 Prevent inode sharing for directory dentries by by-passing cache.		65a0eece
2025/09/30 06:43	e1d2468af9c1 Prevent inode sharing for directory dentries by by-passing cache.		86341da6
2025/09/29 17:34	dd4881af83ed Add //pkg/sentry/state/stateio and use it for async page loading.		86341da6
2025/09/29 08:11	4764db91e64f Merge pull request #12160 from avagin:bazel-mod-switch		86341da6
2025/09/26 21:41	4764db91e64f Merge pull request #12160 from avagin:bazel-mod-switch		001c9061
2025/09/26 17:37	525aa49cffd0 Add support for FUSE_DEV_IOC_CLONE.		001c9061
2025/09/26 06:03	525aa49cffd0 Add support for FUSE_DEV_IOC_CLONE.		0abd0691
2025/09/25 16:53	092d47419201 Refactor the FUSE dev->connection relationship to be many->one.		0abd0691
2025/09/25 02:44	cd3b33f93629 Merge pull request #11972 from terenceli:issue9918		0abd0691
2025/09/24 02:52	de57ab2a5822 Improvements to stuck task tool		0abd0691
2025/09/23 14:50	f3a5cc681969 Log the raw argv when launching processes		e667a34f
2025/09/23 10:19	f3a5cc681969 Log the raw argv when launching processes		0ac7291c
2025/09/22 21:17	efacb45c502a fsgofer: update lastUnlockedDentry only after unlocking the dentry		0ac7291c
2025/09/22 17:56	efacb45c502a fsgofer: update lastUnlockedDentry only after unlocking the dentry		770ff59f
2025/09/22 09:15	6448dbe1b799 procfs: release the file system mutex on the error path		770ff59f
2025/09/19 08:58	6448dbe1b799 procfs: release the file system mutex on the error path		67c37560
2025/09/19 05:16	6448dbe1b799 procfs: release the file system mutex on the error path		e2beed91
2025/09/18 16:05	29259326ccc9 pgalloc: one async page loader per pages file		e2beed91
2025/09/18 02:55	465cdff00cf8 Merge pull request #12140 from stepancheg:patch-3		e2beed91
2025/09/17 12:46	2c49d9fd3897 kernel: fix circular locking in FSContext.destroy		e2beed91
2025/09/16 23:36	20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.		e2beed91
2025/09/16 10:26	0bb00ae3d273 Check if CtxResumeStack exists in ResumeStackFromContext.		e2beed91
2025/09/15 21:15	9041e2310cf4 Allow default Docker image base to be configurable.		e2beed91
2025/09/11 22:25	57697a8f6350 kernel: periodically preempt tasks when platform max concurrency is exceeded		e2beed91
2025/09/11 09:14	40dfee4a1a3f Automatically enable host UDS for GCS FUSE sidecar containers.		e2beed91
2025/09/10 21:12	f9ecfd997b86 Close the controlFD used to fstat upon an inode cache hit		fdeaa69b
2025/09/10 08:02	3eb1b76e083f Add functionality to deserialize a tar archive to rootfs upper layer.		fdeaa69b
2025/09/09 18:52	e51dca431b51 Remove old NICs and routes during save/restore.		fdeaa69b
2025/09/09 12:01	d6ba9944e431 Don't silently drop errors from tcp.Endpoint.handleListenSegment().		d291dd2d
2025/09/08 22:51	fa6740723923 Merge pull request #12120 from google:dependabot/github_actions/actions/setup-go-6.0.0		d291dd2d
2025/09/06 05:21	fde8adbe9829 Do not save loopback NIC, it is already being set in ReplaceConfig.		d291dd2d
2025/09/05 16:12	2f7f776a4464 Automated rollback of changelist 798788535		d291dd2d
2025/09/04 23:21	16e9064d97c6 Add better panic message for when file type changes without ino number changing		d291dd2d
2025/09/04 02:31	1f322159d285 Update LLVM version to llvm/llvm-project@cb2f0d0a5f14.		d291dd2d
2025/09/03 17:49	b3f689ce6cd2 Integrate LLVM at llvm/llvm-project@cb2f0d0a5f14		19216959
2025/09/03 14:27	376319f48048 Change `metric.fieldMapper` methods to use pointer receivers.		19216959
2025/09/02 23:05	376319f48048 Change `metric.fieldMapper` methods to use pointer receivers.		96a211bc
2025/09/02 11:02	376319f48048 Change `metric.fieldMapper` methods to use pointer receivers.		73911b88
2025/08/30 07:22	376319f48048 Change `metric.fieldMapper` methods to use pointer receivers.		807a3b61
2025/08/29 18:11	1b291cbddc47 Remove obsolete TODOs related to hard links in gofer.		807a3b61
2025/08/29 17:50	2f9565b48833 Merge pull request #12075 from cuiweixie:reflect.TypeFor		807a3b61
2025/08/29 05:48	2f9565b48833 Merge pull request #12075 from cuiweixie:reflect.TypeFor		3e1beec6
2025/08/28 17:50	1826627343ba kvm: ensure hint address > 1<<47 when necessary		d401b9d7
2025/08/28 08:55	bb664f219b9c Exclude failing Java test.		bee60a83
2025/08/26 13:31	bb664f219b9c Exclude failing Java test.		e12e5ba4
2025/08/22 00:54	bb664f219b9c Exclude failing Java test.		bf27483f
2025/08/21 12:52	bb664f219b9c Exclude failing Java test.		3e79b825
2025/08/20 23:19	bb664f219b9c Exclude failing Java test.		0b9605c8
2025/08/20 19:38	bb664f219b9c Exclude failing Java test.		bd178e57
2025/08/20 11:17	c07c524742a7 Add IOCTL NV2080_CTRL_CMD_FB_QUERY_DRAM_ENCRYPTION_STATUS		bd178e57
2025/08/19 20:56	c07c524742a7 Add IOCTL NV2080_CTRL_CMD_FB_QUERY_DRAM_ENCRYPTION_STATUS		79512909
2025/08/19 08:54	5ba23728415e Merge pull request #11996 from ioterw:shebang		523f460e
2025/08/18 23:32	14ff9abbd639 gpu: Remove `--cuda_verify_compatibility` flag.		6e8d317a
2025/08/18 20:51	fc2f4df6597a netstack: set loopback as outgoing NIC for local traffic		6e8d317a
2025/08/16 20:05	fc2f4df6597a netstack: set loopback as outgoing NIC for local traffic		1804e95e
2025/08/16 02:15	5077500e6bee Merge pull request #11983 from stepancheg:pid-file-2		1804e95e
2025/08/15 13:04	e52b1fccd404 Internal change.		1804e95e
2025/08/14 23:54	305c56d5e91a Support batch messages for NETFILTER sockets.		1804e95e
2025/08/14 11:51	14f317c025b1 Fix docker tests in image_test.		dcc075fb
2025/08/14 07:59	14f317c025b1 Fix docker tests in image_test.		22ec1469
2025/08/13 18:50	3cc1182c9d37 Merge pull request #12029 from stepancheg:go-mod-go-branch		22ec1469
2025/08/13 05:40	040777766f38 Merge pull request #11498 from tianyuzhou95:albert/cpuid		22ec1469
2025/08/12 16:29	be7706f521ac Internal change.		22ec1469
2025/08/12 14:07	1f31ba17e085 Hard links Support Phase 1: Gofer Client dentry/inode refactor		22ec1469
2025/08/11 19:17	1f31ba17e085 Hard links Support Phase 1: Gofer Client dentry/inode refactor		c06e8995
2025/08/11 17:16	a9049fb95720 Update nvidia_driver_differ to also check ioctl numbers.		c06e8995
2025/08/10 19:12	a9049fb95720 Update nvidia_driver_differ to also check ioctl numbers.		32a0e5ed
2025/08/08 22:22	d54f31a72b1d nvproxy: Fix ioctl number inconsistencies in the version table.		32a0e5ed
2025/08/08 10:20	b5a53651c3eb nvproxy: Add 535.261.03 and 570.172.08 drivers.		56444e07
2025/08/07 22:19	dc7d71f37d12 Introduce IoctlInfo to provide information about an ioctl.		6a893178
2025/08/07 10:18	50318415e83d Fix typo		04cffc22
2025/08/06 22:15	7048e11fa6c3 Put some BugTracebacks in Systrap.		9a42d6b1
2025/08/06 10:14	2099bc1c6a2e Rename WARN* functions to BugTraceback*, and optimize them for inlining.		4bd24a3e
2025/08/05 21:41	1fb4c0861973 Fix leaking /proc/self/mem of a new process after execve.		ffe1dd46
2025/08/05 09:38	094dd52cea4a kernel: handle MemoryManager().Activate() errors		37880f40
2025/08/04 21:17	153f262575a6 nvproxy: Add support for NV_SEMAPHORE_SURFACE_CTRL_CMD_UNBIND_CHANNEL.		f5bcc8dc
2025/08/04 09:13	67b57f6fa0de Internal change.		abdcb213
2025/08/04 07:40	67b57f6fa0de Internal change.		7368264b
2025/08/02 13:51	fc9c972fa636 runsc: Enable cpu-num-from-quota by default		7368264b
2025/08/02 00:48	cecb151fab97 Nftables NEW_RULE implementation.		7368264b
2025/08/01 18:29	cecb151fab97 Nftables NEW_RULE implementation.		40127d41
2025/08/01 12:47	6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message.		40127d41
2025/08/01 00:43	6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message.		0c075d67
2025/07/31 21:42	6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message.		3526e777
2025/07/31 12:41	3e0b53db6936 Clean up p9 package.		3526e777
2025/07/31 03:19	3e0b53db6936 Clean up p9 package.		f8f2b4da
2025/07/30 14:09	14c22da65f04 Serialize writes to slice of precompiled seccomp programs.		f8f2b4da
2025/07/30 01:08	2305d33da145 tmpfs: Skip socket files when generating tar archive.		f8f2b4da
2025/07/29 19:28	2305d33da145 tmpfs: Skip socket files when generating tar archive.		ba28e0a8
2025/07/29 13:07	da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo.		ba28e0a8
2025/07/29 01:04	da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo.		c4a95487
2025/07/28 22:44	da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo.		032c6886
2025/07/28 13:02	8a89a2fab4a2 vfs: call UnregisterFileAsyncHandler before FileDescriptionImpl.Release		032c6886
2025/07/26 07:30	8a89a2fab4a2 vfs: call UnregisterFileAsyncHandler before FileDescriptionImpl.Release		fb8f743d
2025/07/25 18:20	0dcd321dbc11 Ensure Agent run loop is finished before returning from Stop.		fb8f743d
2025/07/25 05:15	88f0a2610332 Install docker compose plugin in gVisor's dind image.		fb8f743d
2025/07/25 00:31	d48212e236c1 No need to lock packetEPsMu in newNIC.		fb8f743d
2025/07/24 22:10	d48212e236c1 No need to lock packetEPsMu in newNIC.		65d60d73
2025/07/24 12:29	d335069c7ec4 Nftables support handles for rules.		65d60d73
2025/07/24 00:28	d335069c7ec4 Nftables support handles for rules.		0c1d6ded
2025/07/23 12:27	2ec68434d7cd Update seccomp filters to support new kernels		e0b9ac93
2025/07/23 00:25	5425fb79c305 Create a small DSL for streamlining nftables request creation for tests.		e1dd4f22
2025/07/22 12:22	00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function.		8e9d1dc1
2025/07/22 11:01	00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function.		1555463b
2025/07/21 22:00	304075324c8b `iperf_test`: Better debug logging on failure.		1555463b
2025/07/21 17:58	304075324c8b `iperf_test`: Better debug logging on failure.		56d87229
2025/07/21 09:57	9ea209fd11eb Fix directfs restore for deleted regular file when read handle is not available		56d87229
2025/07/20 04:01	9ea209fd11eb Fix directfs restore for deleted regular file when read handle is not available		7117feec
2025/07/18 22:31	d7830d968c56 Implement functionality for Nftables GetChain message.		7117feec
2025/07/18 10:27	db69f0048be5 PGO benchmarks: Only run a representative subset of benchmark tests.		f550e092
2025/07/18 10:07	db69f0048be5 PGO benchmarks: Only run a representative subset of benchmark tests.		88248e14
2025/07/17 20:56	da551ec98173 Add mutex locking to netfilter socket operations with nftables.		88248e14
2025/07/17 08:53	728dc484bcb5 Nftables New Chain implementation		89164500
2025/07/17 07:51	728dc484bcb5 Nftables New Chain implementation		44f8051e
2025/07/16 18:40	128211909518 gofer: Support restore of deleted directories whose original path is occupied.		44f8051e
2025/07/16 06:37	3b6e02d26316 overlay: return st_nlink=1 for directories		124ec9cc
2025/07/16 00:15	3b6e02d26316 overlay: return st_nlink=1 for directories		03fcfc4b
2025/07/15 11:05	8b2eb5fb303a Added fields to Nftable struct for better NFT_TABLE_NEW and GET functionality.		03fcfc4b
2025/07/14 21:55	c2f9f2752729 Merge pull request #11850 from OkamiW:udp-forwarder-not-handled-packets		03fcfc4b
2025/07/14 21:34	7323f1df8aad Add tests that run docker exec command in gvisor.		03fcfc4b
2025/07/14 09:30	7323f1df8aad Add tests that run docker exec command in gvisor.		d8fc7335
2025/07/10 22:49	7323f1df8aad Add tests that run docker exec command in gvisor.		3cda49cf
2025/07/10 21:08	d83988551b75 Make nccl and sr tests work on ARM		3cda49cf
2025/07/10 09:07	d83988551b75 Make nccl and sr tests work on ARM		d7384b6d
2025/07/10 07:26	d83988551b75 Make nccl and sr tests work on ARM		956bd956
2025/07/09 18:17	bb08e9604675 Make GPU smoke tests work on ARM		956bd956
2025/07/09 13:55	237f2d7dcb80 Make env flag for runsc exec non idempotent.		956bd956
2025/07/09 01:54	237f2d7dcb80 Make env flag for runsc exec non idempotent.		f4e5e155
2025/07/08 13:51	4a238a4a1092 `profiletool merge`: Skip empty profile files.		4d9fdfa4
2025/07/08 12:17	4a238a4a1092 `profiletool merge`: Skip empty profile files.		4f67c4ae
2025/07/07 23:07	2a88b274d3a1 Fix duplicate "dev.gvisor" in AnnotationsContainerNameRemapIgnored test.		4f67c4ae
2025/07/07 08:38	8f111be351b5 Wait for main MF loading to start before writing to it during restore.		4f67c4ae
2025/07/05 00:16	85e76111eb28 Merge pull request #11557 from JiaHuann:master		4f67c4ae
2025/07/04 12:14	85e76111eb28 Merge pull request #11557 from JiaHuann:master		d869b261
2025/07/04 00:12	85e76111eb28 Merge pull request #11557 from JiaHuann:master		76ad128c
2025/07/03 12:09	85e76111eb28 Merge pull request #11557 from JiaHuann:master		a3c808e4
2025/07/03 00:07	85e76111eb28 Merge pull request #11557 from JiaHuann:master		115ceea7
2025/07/02 12:02	902e88ff9314 Docker tests and benchmarks: Remove use of exposed ports.		0cd59a8f
2025/07/01 23:57	a437d8d9cf64 Merge pull request #11878 from sellskin:master		bc80e4f0
2025/07/01 11:52	8a1a0408af54 gofer: Ensure mount flags are applied for bind mounts		091a06cd
2025/07/01 09:51	8a1a0408af54 gofer: Ensure mount flags are applied for bind mounts		6e83b42d
2025/06/30 20:41	0a99125cd80f Check MS_RDONLY for O_TRUNC before doing file truncation.		6e83b42d
2025/06/30 15:20	501a6637cc98 sentry/kernel: allow pending signal sets to be read without locking		6e83b42d
2025/06/28 10:36	501a6637cc98 sentry/kernel: allow pending signal sets to be read without locking		fc9d8ee5
2025/06/27 21:36	075576a027e1 Run more benchmarks for PGO profiling.		fc9d8ee5
2025/06/27 18:04	075576a027e1 Run more benchmarks for PGO profiling.		803ce19b
2025/06/27 00:15	81a6e524f55d Add test coverage for docker build command in gVisor.		803ce19b
2025/06/26 12:12	6d7f0749eb7f PGO: Create profile data for KVM platform as well.		ba7e550f
2025/06/26 00:29	f8854c4e9ba7 Move PGO profile data to `runsc/profiles/data`.		26d77996
2025/06/25 10:38	ca812bcd892b PGO update: Parse flags more correctly.		26d77996
2025/06/24 21:28	14c05c175fe7 seccomp: set seccompNotifyIsSupported		26d77996
2025/06/24 17:07	2c0b7e7f37f7 Internal change.		26d77996
2025/06/24 08:46	2c0b7e7f37f7 Internal change.		e2f27c35
2025/06/24 05:05	ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`.		e2f27c35
2025/06/23 17:03	ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`.		1a7fb460
2025/06/21 23:49	ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`.		d6cdfb8a
2025/06/21 00:09	f667ab467441 Typo fix.		d6cdfb8a
2025/06/20 20:08	f667ab467441 Typo fix.		804b3919
2025/06/20 12:06	85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded.		804b3919
2025/06/19 00:43	85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded.		ed3e87f7
2025/06/18 23:44	85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded.		ca631f70
2025/06/18 12:42	95d875276806 Merge pull request #11822 from google:pgo/update-2025-06-17		ca631f70
2025/06/18 00:42	95d875276806 Merge pull request #11822 from google:pgo/update-2025-06-17		e77fae15
2025/06/17 12:39	0277f27bb469 Create PGO pull requests non-interactively.		a5686133
2025/06/17 00:36	9473f2d16d4b PGO update script: Connect to GitHub over HTTPS rather than SSH.		cfebc887
2025/06/16 20:54	9473f2d16d4b PGO update script: Connect to GitHub over HTTPS rather than SSH.		d1716036
2025/06/16 12:33	03a93e960bfc Isolate NETLINK_NETFILTER socket behavior behind the nftables flag in runsc.		d1716036
2025/06/15 03:22	03a93e960bfc Isolate NETLINK_NETFILTER socket behavior behind the nftables flag in runsc.		5f4b362d
2025/06/14 14:20	550b7eb983d0 Move PGO git logistics to a dedicated script.		5f4b362d
2025/06/14 13:49	550b7eb983d0 Move PGO git logistics to a dedicated script.		0e8da31f
2025/06/14 00:48	2a2d4ae23b3b Refactor nftables package and exposed it to tcpip/stack/		0e8da31f
2025/06/13 18:48	2a2d4ae23b3b Refactor nftables package and exposed it to tcpip/stack/		1f72c409
2025/06/13 12:46	fb842aab7730 Reduce max thread count in nginx and wordpress benchmarks.		1f72c409
2025/06/13 02:43	fb842aab7730 Reduce max thread count in nginx and wordpress benchmarks.		98683f8f
2025/06/12 03:33	cbf278951e7e Remove environment hook from BuildKite `hooks` directory.		98683f8f
2025/06/11 14:32	84c77aa8ad7e netstack: Don't treat ipv4 link-local addresses specially		98683f8f
2025/06/11 10:40	84c77aa8ad7e netstack: Don't treat ipv4 link-local addresses specially		5d7e17ca
2025/06/10 21:31	54eb14963e63 Refactoring nftables package		5d7e17ca
2025/06/10 11:29	e3c4c4cad86f gofer: Support restore of deleted files whose original path is occupied.		5d7e17ca
2025/06/07 09:25	e3c4c4cad86f gofer: Support restore of deleted files whose original path is occupied.		4826c28e
2025/06/06 20:14	718734347393 Add instructions on DNS config to run docker in gVisor on GKE autopilot.		4826c28e
2025/06/06 08:11	a6711d1e1dc6 runsc/do: allow to add host bind-mounts		3d899f2c
2025/06/06 02:30	a6711d1e1dc6 runsc/do: allow to add host bind-mounts		6b6b5f21
2025/06/05 13:19	6b5372dfb38e Add cuda_tests to gke_tester		6b6b5f21
2025/06/05 00:09	f2d2ff78b0fe Ignore sysmsg `tgkill` errors if the sysmsg thread is already dead.		6b6b5f21
2025/06/04 20:28	b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size		6b6b5f21
2025/06/04 08:27	b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size		e565f08d
2025/06/03 23:14	e888aa733876 Pass the container name to SpecEnviron instead of container ID.		a30356b7
2025/06/03 10:04	45108140e4ad nvproxy: Add support for 535.129.03.		a30356b7
2025/06/02 21:03	de16a81be39e Do not support netstack s/r for NetworkPlugin mode.		a30356b7
2025/06/02 20:23	de16a81be39e Do not support netstack s/r for NetworkPlugin mode.		aaaaf5ea
2025/06/02 09:02	c8952f75963b Add support for executing a binary before saving and after restoring.		aaaaf5ea
2025/05/30 04:47	c8952f75963b Add support for executing a binary before saving and after restoring.		3d2f584d
2025/05/29 15:36	609fac8bc6fe packetimpact: ignore retransmitted SYNACK on Linux		3d2f584d
2025/05/28 20:05	33d4ca3a0ff5 Allow sched_getaffinity in syscall filters		3d2f584d
2025/05/28 15:05	96ca35d001c2 Merge pull request #11760 from fjvela:master		3d2f584d
2025/05/26 11:11	96ca35d001c2 Merge pull request #11760 from fjvela:master		874a1386
2025/05/25 17:19	96ca35d001c2 Merge pull request #11760 from fjvela:master		2d4582d0
2025/05/24 11:37	96ca35d001c2 Merge pull request #11760 from fjvela:master		ed351ea7
2025/05/23 22:37	a2f865c94d39 Adjust WaitReasonSemacquire for go1.25		ed351ea7
2025/05/23 16:17	a2f865c94d39 Adjust WaitReasonSemacquire for go1.25		f8cc0c83
2025/05/23 10:35	9034347e1ed3 Accept EMSGSIZE in native run for RawPacketMsgSizeTest.SpliceTooLong.		f8cc0c83
2025/05/22 22:34	9034347e1ed3 Accept EMSGSIZE in native run for RawPacketMsgSizeTest.SpliceTooLong.		fa44301a
2025/05/22 11:43	ab9666dc3464 Handle non-empty EmptyDirs used by GCS Fuse CSI Driver.		0919b50b
2025/05/21 22:41	f2d25699acbc Merge pull request #11754 from thundergolfer:patch-1		0919b50b
2025/05/21 17:00	f2d25699acbc Merge pull request #11754 from thundergolfer:patch-1		dc5d3808
2025/05/21 10:39	d495ebfe89e1 tcp: use lockdep mutexes		dc5d3808
2025/05/21 02:08	d495ebfe89e1 tcp: use lockdep mutexes		b47f9e02
2025/05/20 13:01	c8e7b674568f Adjust runtime schedt.nmspinning offset for go1.25		b47f9e02
2025/05/20 09:56	d19c3bc9bcdf runsc: create file as destination for file mount		b47f9e02
2025/05/19 21:53	d19c3bc9bcdf runsc: create file as destination for file mount		b84f0537
2025/05/19 09:51	d19c3bc9bcdf runsc: create file as destination for file mount		8f9cf946
2025/05/17 12:17	d19c3bc9bcdf runsc: create file as destination for file mount		f41472b0
2025/05/16 23:07	16bb0d3588bf Merge pull request #11729 from stepancheg:constant		f41472b0
2025/05/16 18:07	d30c58e5b8a4 Add (probably broken) BuildKite pipeline for refreshing PGO profiles.		f41472b0
2025/05/15 21:50	d30c58e5b8a4 Add (probably broken) BuildKite pipeline for refreshing PGO profiles.		cfde8269
2025/05/13 07:08	ab0097c4d068 Merge pull request #11716 from avagin:build-runsc		9497799b
2025/05/12 19:37	d7ad8517a3cd proc: Allow to write into /proc/pid/mem		f6671af7
2025/05/12 15:55	e4c059533a2a Ignore container name remap annotations during spec validation.		f6671af7
2025/05/10 11:31	e4c059533a2a Ignore container name remap annotations during spec validation.		77908e5f
2025/05/09 22:20	40988f13e6b2 Add CUDA 12.8 tests		77908e5f
2025/05/09 09:20	f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap.		77908e5f
2025/05/09 00:28	f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap.		bb813bcc
2025/05/08 17:27	06acafc42203 nvproxy: Add support for 535.247.01 and 570.133.20.		bb813bcc
2025/05/08 08:25	06acafc42203 nvproxy: Add support for 535.247.01 and 570.133.20.		dbf35fa1
2025/05/07 19:16	0bf11c160ca6 netstack/tuntap: implement the IFF_TUN_EXCL flag		dbf35fa1
2025/05/07 14:14	f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.		dbf35fa1
2025/05/07 03:34	f56929a6872c Lock around grabbing the version and hdrLen in packetmmap.		350f4ffc
2025/05/06 14:32	3e5886fba408 Split cuda tests into separate lib.		350f4ffc
2025/05/06 09:10	3e5886fba408 Split cuda tests into separate lib.		ae98e6b9
2025/05/05 20:10	6750bae81956 kvm, eventfd: support KVM_IOEVENTFD		ae98e6b9
2025/05/05 17:49	6750bae81956 kvm, eventfd: support KVM_IOEVENTFD		6ca47dd8
2025/05/05 08:07	5c4b4f51c72e kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host		6ca47dd8
2025/05/03 09:35	5c4b4f51c72e kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host		b0714e37
2025/05/02 20:25	0c66b7ecfcb3 Use `vfs_cap_data` and `vfs_ns_cap_data` structs defined in linux header.		b0714e37
2025/05/02 08:21	5790f690667a lock around getting the current time from the stack.		d7f099d1
2025/05/02 02:10	5790f690667a lock around getting the current time from the stack.		51b137cd
2025/05/01 12:59	5dfdea843cf7 Follow-up fixes for #11644		51b137cd
2025/05/01 00:55	8090bc48517d Merge pull request #11609 from Amaindex:master		ce7952f4
2025/04/30 18:54	8090bc48517d Merge pull request #11609 from Amaindex:master		937aafd7
2025/04/30 12:53	e5f387569031 Add more paths for which to run all GPU tests.		937aafd7
2025/04/30 00:43	e5f387569031 Add more paths for which to run all GPU tests.		85a5a23f
2025/04/29 12:40	8d061298ccd2 Remove version flag from checking driver version		4a62c0b1
2025/04/29 07:59	8d061298ccd2 Remove version flag from checking driver version		aeb6ec69
2025/04/28 18:49	066d932b8e96 Release port for non listening sockets which are bound with `any` address.		aeb6ec69
2025/04/28 17:28	58415ad1a884 `starttime`: Get process start time from `/proc/self/status` if possible.		aeb6ec69
2025/04/28 04:54	58415ad1a884 `starttime`: Get process start time from `/proc/self/status` if possible.		c6b4fb39
2025/04/27 15:44	90ce1abe0986 Implement a `timing` library that can time a multi-goroutine procedure.		c6b4fb39
2025/04/26 12:14	60ec4e7a009d Add 12.8 CUDA tests		c6b4fb39
2025/04/25 23:04	27f3984c948b hostinet: Add SO_ORIGINAL_DST and IP6T_ORIGINAL_DST.		c6b4fb39
2025/04/25 21:43	73c74424ac82 bazel/rules_go: don't revert commits		c6b4fb39
2025/04/25 09:42	73c74424ac82 bazel/rules_go: don't revert commits		dea5c7e4
2025/04/24 21:42	73c74424ac82 bazel/rules_go: don't revert commits		e3715315
2025/04/16 09:51	b0adacc40e21 Deflake TestUsageFD.		a95239b1
2025/04/15 20:42	eae549dc581a Fix overflow in tcp.sender.sendData() for 32-bit architectures.		a95239b1
2025/04/15 08:37	56cb97e8777d Merge pull request #11637 from Snowflake-Labs:jyin-ioctl-fix		85125322
2025/04/15 03:13	56cb97e8777d Merge pull request #11637 from Snowflake-Labs:jyin-ioctl-fix		0bd6db41
2025/04/11 23:03	9cc0e9f85e6f De-dup testMultiContainerCheckpointRestore().		0bd6db41
2025/04/11 11:01	a84be6555251 Skip expensive GPU tests from main pipeline for non-GPU-related changes.		12ba9c21
2025/04/10 22:57	3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.		94486846
2025/04/10 21:35	3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints.		1ef3ab4d
2025/04/10 10:54	3b2cca27c7e6 Add IOCTLS so earlier driver versions pass nvidia-smi test		1ef3ab4d
2025/04/10 00:03	3b2cca27c7e6 Add IOCTLS so earlier driver versions pass nvidia-smi test		988b336c
2025/04/09 21:02	f2ed32acf6ba Exclude more runtime tests that fail with IPv6.		988b336c
2025/04/09 08:59	f2ed32acf6ba Exclude more runtime tests that fail with IPv6.		47d015b1
2025/04/08 20:58	f2ed32acf6ba Exclude more runtime tests that fail with IPv6.		b133e63a
2025/04/08 08:58	f47013e0fa72 Add back 'nvidia-smi' test in gpu-smoke-tests		a775275d
2025/04/07 20:42	9078ddaf6a6f Clean up state file reading.		a2ada0e7
2025/04/07 20:37	9078ddaf6a6f Clean up state file reading.		2f0c9720
2025/04/07 08:37	7ff7451cb52d Add more debug logging for host settings.		2f0c9720
2025/04/05 05:54	7ff7451cb52d Add more debug logging for host settings.		1c65791e
2025/04/04 18:32	b1b7c02aa785 Add a test to check getifaddrs returns IPv4 address followed by IPv6.		c53ea9c9
2025/04/04 15:11	7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore		c53ea9c9
2025/04/04 03:09	7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore		1740c707
2025/04/03 23:07	7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore		d7ae3a11
2025/04/03 15:06	0236fdeb6bb9 Add annotation to allow container name remap		d7ae3a11
2025/04/03 03:04	0236fdeb6bb9 Add annotation to allow container name remap		996a9618
2025/04/02 19:42	845fa645b0cd Fix the order of primary addresses returned for a NIC.		b0cc4801
2025/04/02 15:00	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.		b0cc4801
2025/04/01 23:28	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.		c799dfdd
2025/04/01 11:26	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.		b8645499
2025/04/01 07:40	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.		36d76a97
2025/03/31 18:39	8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.		36d76a97
2025/03/31 17:56	8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex.		d3999433
2025/03/29 10:34	d06b27e25f95 Disable JAVA tests that require IPV6_MULTICAST_IF support.		d3999433
2025/03/29 10:14	d06b27e25f95 Disable JAVA tests that require IPV6_MULTICAST_IF support.		cf25e2c2
2025/03/28 21:13	6a54f3c41ac9 pgalloc: mark aborted async page load segments as unstarted		cf25e2c2
2025/03/28 18:32	6a54f3c41ac9 pgalloc: mark aborted async page load segments as unstarted		49900278
2025/03/28 09:10	836c7d672f2a Deflake TestUsage.		49900278
2025/03/28 02:08	836c7d672f2a Deflake TestUsage.		6c09fb82
2025/03/27 12:58	523c82ffd030 Fix restore logic in PRead.		6c09fb82
2025/03/27 00:54	5a21467bcbec tests: don't specify ports for docker containers		20510e88
2025/03/26 12:49	b5f9bed90840 Move nvproxy.objsMu to rootClient.		19e40f48
2025/03/26 09:28	b5f9bed90840 Move nvproxy.objsMu to rootClient.		89d30d73
2025/03/25 20:17	35686886763c pgalloc: avoid unnecessary aplOp allocation in async page loading		89d30d73
2025/03/25 10:13	22ef76efa9bf mm: allow shared anonymous mappings to use huge pages		875573af
2025/03/24 21:03	99749bc5d4fd Merge pull request #11563 from NahumLitvin:patch-1		875573af
2025/03/23 22:41	3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER.		875573af
2025/03/23 02:38	3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER.		4e8d3850
2025/03/22 08:56	3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER.		c6512ef7
2025/03/21 19:46	225a7bc0d28a Internal change.		c6512ef7
2025/03/21 17:44	738e1d995f64 nvproxy: Add HasStatus.SetStatus and provide failWithStatus() util functions.		c6512ef7
2025/03/20 22:31	738e1d995f64 nvproxy: Add HasStatus.SetStatus and provide failWithStatus() util functions.		62330552
2025/03/20 16:30	c16d3fdfadf8 pgalloc: log async page loading progress and info about awaited loads		62330552
2025/03/20 04:28	c16d3fdfadf8 pgalloc: log async page loading progress and info about awaited loads		9209bc22
2025/03/19 22:27	c16d3fdfadf8 pgalloc: log async page loading progress and info about awaited loads		3b7445cf
2025/03/19 16:26	97820ce5c927 nvproxy: Add support for 570.124.06.		3b7445cf
2025/03/19 04:23	97820ce5c927 nvproxy: Add support for 570.124.06.		8d0a2921
2025/03/18 17:21	25d30ccc2c2e Merge pull request #11529 from tianyuzhou95:albert/mmap-test		22a6c2b1
2025/03/18 16:20	8d5f3c982aeb Handle sighandling.KillItself() return error.		22a6c2b1
2025/03/18 04:20	8d5f3c982aeb Handle sighandling.KillItself() return error.		ce3352cd
2025/03/17 17:18	e6b6f2aa1172 Allow IPv6 addresses to be enabled/disabled in runsc based on the sysctl.		489e2dc8
2025/03/17 16:18	6b0a0af86294 Implement basic packet mode support for ptys.		489e2dc8
2025/03/17 04:16	6b0a0af86294 Implement basic packet mode support for ptys.		948c34e4
2025/03/15 16:32	6b0a0af86294 Implement basic packet mode support for ptys.		e2826670
2025/03/14 07:41	b01944883bfc Add memmap.File.MemoryType()		e2826670
2025/03/13 18:31	06f225496253 Deflake TestExecProcList.		e2826670
2025/03/13 06:31	906fb319cc3a nvproxy: Add option to use the device gofer optionally.		44be8b44
2025/03/12 18:25	c68fb3199281 Save runsc version in the metadata during save to compare it during restore.		1a5d9317
2025/03/12 16:33	c68fb3199281 Save runsc version in the metadata during save to compare it during restore.		ee70e6db
2025/03/12 03:32	f9b1ce2f7dab Clean up tty.CheckChange and call it in SetForegroundProcessGroup.		ee70e6db
2025/03/11 23:52	f9b1ce2f7dab Clean up tty.CheckChange and call it in SetForegroundProcessGroup.		f2eee6b3
2025/03/11 15:31	c16484e6e83e Reduce the number of containerd tests in buildkite pipelines.		f2eee6b3
2025/03/10 23:49	c16484e6e83e Reduce the number of containerd tests in buildkite pipelines.		16256247
2025/03/10 12:07	44b97373471a Increase GOMAXPROCS during aio.GoQueue usage		16256247
2025/03/09 07:54	44b97373471a Increase GOMAXPROCS during aio.GoQueue usage		163f510d
2025/03/08 22:13	815317032022 nvproxy: reduce kernel mmap_lock contention from rmAllocOSDescriptor()		163f510d
2025/03/07 23:42	815317032022 nvproxy: reduce kernel mmap_lock contention from rmAllocOSDescriptor()		7e3bd60d
2025/03/07 10:40	9581066c3038 Clone the packet during ipv6 processing.		7e3bd60d
2025/03/07 10:28	9581066c3038 Clone the packet during ipv6 processing.		831e3629
2025/03/06 21:17	c041d9bd5855 Add missing binary_sha256 field		831e3629
2025/03/06 08:07	156f457e28d2 Add kernel.ThreadGroup.ForEachTask().		831e3629
2025/03/05 20:07	df6a53734659 Make it possible to pass internal /dev/null via control.Proc.Exec*		034534df
2025/03/05 08:01	521cc86a91e0 Use the minimum recommended version of cri-tools for containerd tests.		60f5d8d9
2025/03/04 21:05	d844c7bbb719 Allow Sentry to kill itself even when it is the init process		c3901742
2025/03/04 07:55	c05061997149 Fix spec validation for entrypoint.		c3901742
2025/03/03 18:45	0c17600995b9 Fix restore with pending exec session		c3901742
2025/03/01 15:03	d71a9b3df5c7 gofer: fix ref drop when racily-unlinked synthetic file is invalidated		c3901742
2025/03/01 12:51	d71a9b3df5c7 gofer: fix ref drop when racily-unlinked synthetic file is invalidated		67cf5345
2025/02/28 23:40	3885a281f2ae test: add syscall_test() perf argument		67cf5345
2025/02/28 15:38	fa0fbae6fb96 Fix Go workflow with permissions needed to write to PR statuses.		1e7a43e1
2025/02/28 11:37	86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support		1e7a43e1
2025/02/26 15:33	86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support		6a8fcbc4
2025/02/25 22:56	86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support		d34966d1
2025/02/21 17:35	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.		d34966d1
2025/02/20 17:03	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.		0808a665
2025/02/19 22:40	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.		50668798
2025/02/19 10:38	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.		cbd8edab
2025/02/18 20:46	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.		9a14138f
2025/02/18 18:26	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.		c37c7249
2025/02/18 08:44	17563a8af926 Return EACCES when calling setpgid() after execve()		c37c7249
2025/02/17 20:42	17563a8af926 Return EACCES when calling setpgid() after execve()		429ea007
2025/02/17 08:39	17563a8af926 Return EACCES when calling setpgid() after execve()		4121cf9d
2025/02/15 11:55	17563a8af926 Return EACCES when calling setpgid() after execve()		40a34ec9
2025/02/14 22:46	67b2e7327f79 gofer: Cleanup unlock code.		40a34ec9
2025/02/14 10:38	d05a277ca3a1 Add checkpoint restore metrics.		fe17639f
2025/02/13 22:17	6b4f0082c280 nvproxy: Add support for AMPERE_A, ADA_A, HOPPER_A.		d9a046cf
2025/02/13 10:15	c8d5afe1d21c Merge pull request #11457 from stepancheg:state-file		7320a65f
2025/02/12 22:12	85557587601b Add a test for tcpdump.		2afad16e
2025/02/12 18:10	85557587601b Add a test for tcpdump.		b27c2402
2025/02/12 10:10	d949e7177c2f taskCopyContext should not require holding task.mu.		b27c2402
2025/02/11 13:17	d949e7177c2f taskCopyContext should not require holding task.mu.		f2baddf5
2025/02/11 08:08	d949e7177c2f taskCopyContext should not require holding task.mu.		43f51a00
2025/02/10 18:58	faac8f36cd89 Add support for PACKET_STATISTICS.		43f51a00
2025/02/10 12:16	9c490f813d37 Implement GetSockOpt PACKET_HDRLEN and add a test for tcpdump.		43f51a00
2025/02/07 22:11	9c490f813d37 Implement GetSockOpt PACKET_HDRLEN and add a test for tcpdump.		ef44b750
2025/02/07 10:08	53d6f3dd2a22 Use github.com/containerd/log in gVisor shim.		a4f327c2
2025/02/06 21:27	a4a0e84b5cd5 Allow sending and importing a host event fd.		53657d1b
2025/02/06 09:23	902a56c6c584 Use github.com/containerd/errdefs in gVisor shim.		1e1faf27
2025/02/06 04:24	902a56c6c584 Use github.com/containerd/errdefs in gVisor shim.		577d049b
2025/02/05 15:13	e37e6814d3b7 Remove `srcs_version` and `python_version` attributes, as they already default to `"PY3"`		577d049b
2025/02/05 03:09	02f5a55b4027 Test gVisor with containerd 1.7.25.		5896748e
2025/02/04 15:05	f6b843d9a6c0 Add tests with netstack s/r enabled.		44c01590
2025/02/04 11:25	f6b843d9a6c0 Add tests with netstack s/r enabled.		8f267cef
2025/02/03 22:24	4a09ec772e1d Allow crypto/tls in go runtime tests.		8f267cef
2025/02/03 18:23	4a09ec772e1d Allow crypto/tls in go runtime tests.		a21a8419
2025/02/03 10:22	1a9abee80b7c nvproxy: Add support for 570.86.15 driver.		a21a8419
2025/02/02 00:08	1a9abee80b7c nvproxy: Add support for 570.86.15 driver.		568559e4
2025/02/01 12:04	1a9abee80b7c nvproxy: Add support for 570.86.15 driver.		0dff8567
2025/02/01 03:33	1a9abee80b7c nvproxy: Add support for 570.86.15 driver.		aa47157c
2025/01/31 14:22	a500a2c751b1 Defalke test target pkg/tcpip/stack:bridge_test.		aa47157c
2025/01/30 23:00	e0435b9a53ea Merge pull request #11415 from avagin:codespell		4c6ac32f
2025/01/30 10:58	04f9204697c6 Yield thread group leader `*Task` in `TaskSet.ForEachThreadGroup`.		9c8ab845
2025/01/29 22:56	8bdf76c5ca71 Internal change.		afe4eff5
2025/01/29 10:53	63c9278b9af1 Merge pull request #11360 from Snowflake-Labs:xuzhoyin-vmas-fix		08fa8553
2025/01/29 10:33	63c9278b9af1 Merge pull request #11360 from Snowflake-Labs:xuzhoyin-vmas-fix		865ef71e
2025/01/28 21:21	8c386259e0cf Add /usr/local/nvidia/bin to PATH in ffmpeg image.		865ef71e
2025/01/28 09:21	f3259f42b394 Merge pull request #11395 from google:dependabot/github_actions/actions/setup-go-5.3.0		ac37c1f8
2025/01/27 21:18	ca0ba7cbbad0 Merge pull request #11392 from tianyuzhou95:albert-develop		18070896
2025/01/27 18:57	ca0ba7cbbad0 Merge pull request #11392 from tianyuzhou95:albert-develop		d99a33ad
2025/01/27 09:15	1c38b6cbed2c Add levels for handling spec validation via flag.		d99a33ad
2025/01/25 02:02	1c38b6cbed2c Add levels for handling spec validation via flag.		9fbd772e
2025/01/24 14:00	1c38b6cbed2c Add levels for handling spec validation via flag.		1293872d
2025/01/24 01:58	1c38b6cbed2c Add levels for handling spec validation via flag.		521b0ce3
2025/01/24 00:18	1c38b6cbed2c Add levels for handling spec validation via flag.		f6a35ef3
2025/01/23 13:57	c238e15234fe Fix validation of close_range `last` fd argument.		f6a35ef3
2025/01/23 01:54	c238e15234fe Fix validation of close_range `last` fd argument.		9d4f14f8
2025/01/22 13:43	50731e5beca5 Merge pull request #11377 from thegreatfatzby:patch-1		25e17fd3
2025/01/22 10:21	50731e5beca5 Merge pull request #11377 from thegreatfatzby:patch-1		da72ac06
2025/01/21 21:11	8483ace3fbdd Merge pull request #11376 from evanphx:b-cgroupfs-flag		da72ac06
2025/01/21 16:10	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.		da72ac06
2025/01/17 22:39	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.		f2cb035c
2025/01/17 19:33	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.		bb91bdd4
2025/01/17 10:32	25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP.		bb91bdd4
2025/01/16 13:41	25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP.		f9e07a6e
2025/01/16 09:19	25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP.		968edaf4
2025/01/15 20:10	1864d9d091cc Untag user addresses before handling them in the Sentry		968edaf4
2025/01/15 11:48	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.		968edaf4
2025/01/14 21:35	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.		7315a7cf
2025/01/14 09:21	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.		0dce2409
2025/01/14 05:32	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.		b1f1cd88
2025/01/13 21:10	4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case.		b1f1cd88
2025/01/13 09:05	4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case.		249ceea9
2025/01/11 15:40	4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case.		6dbc6a9b
2025/01/11 02:30	17962e58c113 Replace unsafeSlice with unsafe.Slice.		6dbc6a9b
2025/01/10 19:47	2d0e39a87f4c Merge pull request #11351 from 2022tgoel:tarushii/gpu_test_fail		d9381135
2025/01/10 14:26	c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap		d9381135
2025/01/09 21:33	c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap		67d7ec0a
2025/01/09 20:30	c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap		9220929f
2025/01/09 09:28	9803629d9240 Don't fail compatibility test when COS versions are not yet released.		9220929f
2025/01/09 00:20	9803629d9240 Don't fail compatibility test when COS versions are not yet released.		f3558dbf
2025/01/08 11:10	2edcee37d9fb Specify all capabilities in TestGPUCheckpointRestore.		f3558dbf
2025/01/07 22:01	b94ab7381565 Merge pull request #11333 from benhurdelhey:ben-hurdelhey_data/fix-mount-setup-initial-userns-fallback		f3558dbf
2025/01/07 08:51	bf9d60db96d3 Merge pull request #11341 from avagin:mountinfo-int		f3558dbf
2025/01/06 19:40	7af7cb036777 Merge pull request #10376 from google:dependabot/github_actions/actions/checkout-4		f3558dbf
2025/01/06 06:30	015477747dd1 Exclude cmd/crypto/tls from Go 1.22 tests.		f3558dbf
2025/01/03 23:09	4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters.		f3558dbf
2025/01/03 11:05	4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters.		96d578a3
2024/12/30 23:02	4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters.		d3ccff63
2024/12/30 09:52	b11efeaecd4a nvproxy: Clean up struct field tags.		d3ccff63
2024/12/27 23:22	768db8693149 Build `runsc-metric-server` binary using `nocgo` instead of `static`.		d3ccff63
2024/12/27 10:12	383011a14af1 Add utility functions to validate benchmark runtime.		d3ccff63
2024/12/26 21:02	84172e4e7034 Go benchstat parser: Support alternate syntax for parameters.		d3ccff63
2024/12/26 09:40	f7ad032e4adc Kubernetes tests & benchmark: Simplify `KubernetesContext` interface.		d3ccff63
2024/12/24 10:23	f7ad032e4adc Kubernetes tests & benchmark: Simplify `KubernetesContext` interface.		b4fbdbd4
2024/12/23 21:13	1a9f8b17edc3 Internal change.		b4fbdbd4
2024/12/22 07:52	0f8db9fa2891 Deflake process_vm_read_write test.		b4fbdbd4
2024/12/20 22:07	0f8db9fa2891 Deflake process_vm_read_write test.		d7f584ee
2024/12/20 09:56	0fb4cc71ba95 Kubernetes benchmarks: Wait for namespace cleanup before proceeding.		49cfeac8
2024/12/19 21:51	f1656df6d67f Add validation logic to check overlay2 flag override.		c87fa8a3
2024/12/19 19:25	f1656df6d67f Add validation logic to check overlay2 flag override.		1d58202c
2024/12/19 09:44	f7875f90fda1 systrap: Unset fpstate_changed if ctx did not change.		1d58202c
2024/12/19 02:36	f7875f90fda1 systrap: Unset fpstate_changed if ctx did not change.		1432fc84
2024/12/18 13:34	44562d85cf06 `testcluster`: Warn if a pod or namespace deletion takes longer than expected.		1432fc84
2024/12/18 13:07	44562d85cf06 `testcluster`: Warn if a pod or namespace deletion takes longer than expected.		a0626d3a
2024/12/17 23:56	afdd74ad6402 Allow --overlay2 flag to be overridden by annotations.		a0626d3a
2024/12/17 11:43	5fdedb527657 Parallelize BuildKite "All GPU drivers test".		bc1a1b50
2024/12/17 10:56	5fdedb527657 Parallelize BuildKite "All GPU drivers test".		f93b2b55
2024/12/16 21:46	0f8216cd3043 Do not validate resources during restore.		f93b2b55
2024/12/16 09:42	8516598640c4 Re-add PyTorch benchmarks into PyTorch image. Update CUDA version.		eec85da6
2024/12/16 05:56	8516598640c4 Re-add PyTorch benchmarks into PyTorch image. Update CUDA version.		7cbfbb3a
2024/12/14 12:47	7aa4e8dc34fa HTTPBenchmark: Tolerate probe failures when initially waiting for server.		7cbfbb3a
2024/12/13 23:35	bd0cbf807169 Fix typo in exec.go.		7cbfbb3a
2024/12/13 11:24	9fcf0b5b5360 proc: invalidate task inodes when tasks are destroyed		7d3b55db
2024/12/13 01:13	afa323bd3070 Replace most instances of IncRef with Clone.		3547e30f
2024/12/12 23:10	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.		3547e30f
2024/12/12 11:06	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.		af6e0f6a
2024/12/11 23:02	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.		6f1b0fa8
2024/12/11 10:51	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.		ff949d25
2024/12/11 09:24	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.		cfc402b4
2024/12/10 20:13	01e30ab09b71 nvproxy: don't depend on HVASpace for non-virtmem NVOS32_FUNCTION_ALLOC_SIZE		cfc402b4
2024/12/10 07:03	95ca82d87278 Stable Diffusion benchmark: Specify "latest" tag for container image.		cfc402b4
2024/12/09 18:59	b41e6b89daaa remove TODO keeping bug alive		deb72877
2024/12/09 07:57	54eb79b6e80a Acquire rlock when reading link address from the bridge.		9ac0fdc6
2024/12/07 01:48	22b95a87ac8d `runsc metric-server`: Make binary statically linked.		9ac0fdc6
2024/12/06 12:37	188a756ff387 Add validateMap() to compare maps correctly during OCI spec validation.		9ac0fdc6
2024/12/06 00:33	b92307b4e648 gsutil benchmark: Actually create the pod in the Kubernetes cluster.		946d28f0
2024/12/05 12:30	a8e963b09573 remove outdated bug references for PTYs		1c533826
2024/12/05 00:27	f2abd313672c Minor changes in spec validation method.		29f61fce