| Time |
Kernel Commit |
Kernel Config |
Syzkaller Commit |
Assets |
| 2024/05/03 16:49 |
f67e10cf3866 Automated rollback of changelist 629815554 |
|
610f2a54 |
|
| 2024/05/03 04:57 |
f67e10cf3866 Automated rollback of changelist 629815554 |
|
ddfc15a1 |
|
| 2024/05/02 20:14 |
283b71c3ba08 Merge pull request #10363 from avagin:typos |
|
22ee48a2 |
|
| 2024/05/02 16:44 |
c8da73daaf63 Add option to dump profiling metrics within a container's stdout logs. |
|
22ee48a2 |
|
| 2024/05/02 09:34 |
c8da73daaf63 Add option to dump profiling metrics within a container's stdout logs. |
|
3ba885bc |
|
| 2024/05/01 20:23 |
19c7ca8c3bd9 Add fdbased processor goroutines. |
|
3ba885bc |
|
| 2024/04/30 22:12 |
6180112fcf68 Merge pull request #10287 from coder:hystart |
|
3ba885bc |
|
| 2024/04/30 09:55 |
3d3205071065 Multi-container restore |
|
3ce4924c |
|
| 2024/04/30 04:03 |
3d3205071065 Multi-container restore |
|
f10afd69 |
|
| 2024/04/29 17:42 |
05335ebd62d1 netstack: update tcp_benchmark flag to match that RACK is enabled by default |
|
f10afd69 |
|
| 2024/04/29 05:37 |
05335ebd62d1 netstack: update tcp_benchmark flag to match that RACK is enabled by default |
|
27e33c58 |
|
| 2024/04/27 09:57 |
05335ebd62d1 netstack: update tcp_benchmark flag to match that RACK is enabled by default |
|
07b455f9 |
|
| 2024/04/26 20:44 |
797b9093688d Allow gVisor-specific mount options for bind mounts to be passed via OCI spec. |
|
07b455f9 |
|
| 2024/04/26 08:29 |
385f433a4cdb netstack: add comments to some TCP sender fields |
|
3f914d6b |
|
| 2024/04/26 07:05 |
385f433a4cdb netstack: add comments to some TCP sender fields |
|
8bdc0f22 |
|
| 2024/04/25 17:56 |
dc5eed4f677d Fix check for IPPROTO_ICMP, since SocketType.proto it is not a bitmask. |
|
8bdc0f22 |
|
| 2024/04/25 04:44 |
129734a35201 Pass NEWLINK netlink commands to network stacks |
|
8bdc0f22 |
|
| 2024/04/24 15:37 |
1e1334e88f17 nvproxy: track driver object dependencies |
|
8bdc0f22 |
|
| 2024/04/24 13:52 |
1e1334e88f17 nvproxy: track driver object dependencies |
|
21339d7b |
|
| 2024/04/24 00:42 |
06c085fae508 Add AsyncReader implementation in statefile package. |
|
21339d7b |
|
| 2024/04/23 11:33 |
5cecdfbabd15 Create configuration for fdbased processor goroutines. |
|
21339d7b |
|
| 2024/04/22 22:28 |
5a559423c473 Standardize fd.FD usage across platform and restore |
|
21339d7b |
|
| 2024/04/22 21:08 |
de9adb58ac42 Internal change. |
|
21339d7b |
|
| 2024/04/22 12:38 |
de9adb58ac42 Internal change. |
|
36c961ad |
|
| 2024/04/22 09:05 |
4810afc36c5b GPU support: Add NVIDIA CUDA sample tests. |
|
36c961ad |
|
| 2024/04/20 15:28 |
4810afc36c5b GPU support: Add NVIDIA CUDA sample tests. |
|
af24b050 |
|
| 2024/04/20 02:17 |
cc8c5845088e `dockerutil.ContainerPool`: Add debugging and utilization information. |
|
af24b050 |
|
| 2024/04/19 13:10 |
bdf53b9844c6 Internal change. |
|
af24b050 |
|
| 2024/04/18 23:58 |
93bbcbf35bb2 Retrieve UID/GID from the user string. |
|
af24b050 |
|
| 2024/04/18 14:10 |
fe9d22f06bfa netstack: remove unused XDP reference in fdbased endpoint |
|
af24b050 |
|
| 2024/04/18 02:11 |
fe9d22f06bfa netstack: remove unused XDP reference in fdbased endpoint |
|
bd38b692 |
|
| 2024/04/17 14:07 |
7a48d7a7a845 Switch to using rcvmmsg dispatcher by default. |
|
acc528cb |
|
| 2024/04/17 11:33 |
7a48d7a7a845 Switch to using rcvmmsg dispatcher by default. |
|
18f6e127 |
|
| 2024/04/16 22:20 |
cd6f5a3c507b Simplify iperf benchmarks. |
|
18f6e127 |
|
| 2024/04/16 10:19 |
43c2c00c5006 Delete wire.Reader and wire.Writer. |
|
2338035c |
|
| 2024/04/15 22:07 |
d2e9bf2cef4c Do not auto close "revived" issues. |
|
0d592ce4 |
|
| 2024/04/15 17:05 |
d2e9bf2cef4c Do not auto close "revived" issues. |
|
459f4b00 |
|
| 2024/04/15 10:03 |
617a184cf243 nvproxy: implement and use fmt.Stringer.String for handles and class IDs |
|
459f4b00 |
|
| 2024/04/13 11:59 |
617a184cf243 nvproxy: implement and use fmt.Stringer.String for handles and class IDs |
|
c8349e48 |
|
| 2024/04/12 22:46 |
7ff0b64d6e72 Add pciDeviceFD mmap and initialize it with the corresponding host FD. |
|
c8349e48 |
|
| 2024/04/12 10:44 |
596e8d22b902 Increase `sandbox.waitForStopped` timeout yet again. |
|
a154e056 |
|
| 2024/04/11 22:41 |
0c50496d1add Internal change. |
|
27de0a5c |
|
| 2024/04/11 10:36 |
4583d9fc47b1 Add support for per mount dcache option. |
|
478efa7f |
|
| 2024/04/10 23:51 |
be1a31aa233a Add save-resume variant to syscall tests. |
|
171ec371 |
|
| 2024/04/10 10:40 |
87d8df37c71e Enable save/checkpoint resume with runsc checkpoint command. |
|
171ec371 |
|
| 2024/04/09 21:28 |
7137ec879891 Refactor containerMounter.configureRestore |
|
171ec371 |
|
| 2024/04/09 09:14 |
91a283f8fa1c netstack: zero window probes must have a payload |
|
56086b24 |
|
| 2024/04/08 21:10 |
32bbb188230a systrap: use seccomp notifications to communicate with syscall threads |
|
f3234354 |
|
| 2024/04/08 19:52 |
32bbb188230a systrap: use seccomp notifications to communicate with syscall threads |
|
7591ebb5 |
|
| 2024/04/08 09:08 |
597bc5f90ddd netstack: remove timing and locking from GRO |
|
7591ebb5 |
|
| 2024/04/06 08:38 |
597bc5f90ddd netstack: remove timing and locking from GRO |
|
ca620dd8 |
|
| 2024/04/05 19:27 |
13ff778ec505 Merge pull request #10207 from worrycare:master |
|
ca620dd8 |
|
| 2024/04/05 17:44 |
d5e8d33af3c8 Set FD_CLOEXEC on all open FDs before creating the sandbox or gofer processes. |
|
ca620dd8 |
|
| 2024/04/05 05:44 |
d5e8d33af3c8 Set FD_CLOEXEC on all open FDs before creating the sandbox or gofer processes. |
|
47d9c0ed |
|
| 2024/04/04 20:53 |
3e952d1e305e Modify FUSE inodes so they're not always assumed to be valid. |
|
0ee3535e |
|
| 2024/04/04 10:18 |
5b30c4a27543 Downgrade rseq test TODOs to NOTEs. |
|
0ee3535e |
|
| 2024/04/03 22:18 |
5b30c4a27543 Downgrade rseq test TODOs to NOTEs. |
|
51c4dcff |
|
| 2024/04/03 10:15 |
d3d82abdc470 gVisor: Run runtime tests locally by default. |
|
9d2a90af |
|
| 2024/04/02 22:11 |
d554cabf9a57 Merge pull request #9997 from derpsteb:h100-cc-mode-clean |
|
7925100d |
|
| 2024/04/02 20:51 |
d554cabf9a57 Merge pull request #9997 from derpsteb:h100-cc-mode-clean |
|
f861ecca |
|
| 2024/04/02 10:07 |
7e9c01f12a14 Add Dockerfile and K8S deployments for a basic TPU pytorch workflow. |
|
f861ecca |
|
| 2024/04/01 22:44 |
7e9c01f12a14 Add Dockerfile and K8S deployments for a basic TPU pytorch workflow. |
|
6baf5069 |
|
| 2024/03/31 10:02 |
8c9cbf0d9090 systrap: handle syscall errors |
|
6baf5069 |
|
| 2024/03/30 11:23 |
7d68056681dd Bump `waitForStopped` timeout further. |
|
6baf5069 |
|
| 2024/03/29 22:01 |
32afe881c5ee Update tpuproxy package for a more consistent gVisor naming convention. |
|
6baf5069 |
|
| 2024/03/29 20:32 |
32afe881c5ee Update tpuproxy package for a more consistent gVisor naming convention. |
|
c52bcb23 |
|
| 2024/03/29 01:03 |
88ee65f3a862 Implement pass through ioctl VFIO_IOMMU_UNMAP_DMA. |
|
c52bcb23 |
|
| 2024/03/28 12:58 |
5ba35f516b5c `TestTree`: Utility to run Go tests with a hierarchy unknown at compile time. |
|
ceaf7ddd |
|
| 2024/03/28 11:10 |
5ba35f516b5c `TestTree`: Utility to run Go tests with a hierarchy unknown at compile time. |
|
120789fd |
|
| 2024/03/27 21:57 |
db85b6316f6c Fix Copybara's non-reversible transformations in gVisor. |
|
120789fd |
|
| 2024/03/27 18:36 |
08ed01b28587 `dockerutil`: Implement `ContainerPool`, a pool of reusable test containers. |
|
120789fd |
|
| 2024/03/27 06:19 |
08ed01b28587 `dockerutil`: Implement `ContainerPool`, a pool of reusable test containers. |
|
454571b6 |
|
| 2024/03/26 16:54 |
cc37e536cbf8 Increase the RLIMIT_MEMLOCK when TPUProxy is enabled. |
|
454571b6 |
|
| 2024/03/26 14:44 |
cc37e536cbf8 Increase the RLIMIT_MEMLOCK when TPUProxy is enabled. |
|
bcd9b39f |
|
| 2024/03/26 01:35 |
f94df6d1bfaa Implement VFIO-PCI TPU device's Pread and Pwrite to enable bus master at host. |
|
bcd9b39f |
|
| 2024/03/25 17:13 |
c3ac1773c253 Fix and re-enable `imagegen_test.go`. (2/2: Re-enable.) |
|
5f4fe4de |
|
| 2024/03/25 13:31 |
e1ffb147787a Restore errno around allocation in test matchers |
|
5f4fe4de |
|
| 2024/03/23 19:16 |
e1ffb147787a Restore errno around allocation in test matchers |
|
0ea90952 |
|
| 2024/03/23 06:14 |
fe27d9802592 `Makefile`: `load-%`: Ignore images that do not exist on the current arch. |
|
0ea90952 |
|
| 2024/03/22 16:56 |
81e651201461 Implmenet ioctl command VFIO_DEVICE_RESET. |
|
0ea90952 |
|
| 2024/03/22 04:57 |
ce673f29cee4 Fix and re-enable `imagegen_test.go` (1/2: Fix.) |
|
7a239ce7 |
|
| 2024/03/21 16:50 |
8739b58b61d1 Implement pass through ioctl command VFIO_DEVICE_GET_REGION_INFO. |
|
6af1f94a |
|
| 2024/03/21 12:49 |
8739b58b61d1 Implement pass through ioctl command VFIO_DEVICE_GET_REGION_INFO. |
|
6753db5c |
|
| 2024/03/20 23:38 |
add4c98c288b netstack: fix broken tcp_benchmark XDP mode |
|
6753db5c |
|
| 2024/03/20 11:34 |
5a6aadda2f17 Change the way gVisor TPUProxy passes string arguments to IOCTL syscalls. |
|
5b7d42ae |
|
| 2024/03/19 23:32 |
459348ddf83a Implement pass through ioctl command VFIO_GROUP_GET_DEVICE_FD. |
|
a485f239 |
|
| 2024/03/19 11:29 |
365f85680d19 netstack: make TCP's endpoint type public |
|
e104824c |
|
| 2024/03/19 07:15 |
365f85680d19 netstack: make TCP's endpoint type public |
|
baa80228 |
|
| 2024/03/18 18:12 |
5f5e01d186b2 Fix panic while setting TCP_CORK off. |
|
baa80228 |
|
| 2024/03/18 11:14 |
57dd80d5a810 netstack: don't allocate in hot path use of tcpip.Subnet |
|
baa80228 |
|
| 2024/03/16 07:40 |
57dd80d5a810 netstack: don't allocate in hot path use of tcpip.Subnet |
|
d615901c |
|
| 2024/03/15 18:28 |
655b50cc531a Change statfs of /sys/fs/cgroup to return TMPFS_MAGIC. |
|
d615901c |
|
| 2024/03/14 19:46 |
bcc70e30fc76 Make all restored host FDs explicit |
|
d615901c |
|
| 2024/03/14 07:42 |
bcc70e30fc76 Make all restored host FDs explicit |
|
8d8ee116 |
|
| 2024/03/14 00:51 |
bcc70e30fc76 Make all restored host FDs explicit |
|
f919f202 |
|
| 2024/03/13 11:40 |
ed9678b679dc Delete pgalloc.MemoryFileProvider. |
|
f919f202 |
|
| 2024/03/12 23:38 |
f82d92777207 Ensure that files created after save are visible after restore. |
|
db5b7ff0 |
|
| 2024/03/12 11:51 |
c8a50763f27f Add unimplemented methods for tpuFd from vfs.FileDescriptionImpl. |
|
c35c26ec |
|
| 2024/03/12 03:12 |
7220bea2b7db Fix `runsc --debug` config output. |
|
6ee49f2e |
|
| 2024/03/09 13:16 |
6ad1af2b9cbf netstack: don't allocate by calling AsSlices() in fdbased endpoint |
|
6ee49f2e |
|
| 2024/03/09 00:04 |
558a78de55a4 Automated rollback of changelist 614015218 |
|
6ee49f2e |
|
| 2024/03/08 12:03 |
9b28a3f2eeff g3doc/docker-in-gvisor: don't require mounting cgroups |
|
8e75c913 |
|
| 2024/03/08 00:02 |
be7948184464 images: use the crane tool to detect whether the remote image exists |
|
cf82cde1 |
|
| 2024/03/07 16:52 |
02000395de22 images: avoid huge image deltas |
|
2b789849 |
|
| 2024/03/07 11:55 |
4266145bad7f buildkite: call gcloud to add credentials for us-central1-docker.pkg.dev |
|
2b789849 |
|
| 2024/03/07 01:18 |
4266145bad7f buildkite: call gcloud to add credentials for us-central1-docker.pkg.dev |
|
f39a7eed |
|
| 2024/03/06 12:05 |
5a740cb1b40b Add DirectFS to gofer's seccomp filter options. |
|
f39a7eed |
|
| 2024/03/05 22:54 |
21edc122da22 NAT source ports for locally generated traffic when necessary |
|
f39a7eed |
|
| 2024/03/05 10:49 |
d272e9e5524d Improve TCPFinWait2Test syscall test |
|
9ed46f64 |
|
| 2024/03/04 22:46 |
c6b06ab1a51c Internal change. |
|
5fc53669 |
|
| 2024/03/04 19:27 |
c6b06ab1a51c Internal change. |
|
0f110c12 |
|
| 2024/03/04 10:43 |
40b74cc60b23 `ollama` test: Add image processing capability test. |
|
0f110c12 |
|
| 2024/03/04 03:42 |
40b74cc60b23 `ollama` test: Add image processing capability test. |
|
25905f5d |
|
| 2024/03/03 14:31 |
1ed73f1f6f0c Refactor `ollama` to distinguish loading models and prompting as separate. |
|
25905f5d |
|
| 2024/03/03 01:19 |
fcb9ec1074d6 Update ollama to version 0.1.26. |
|
25905f5d |
|
| 2024/03/02 01:17 |
3172bc04679b Update go_github from v52 to v56 |
|
25905f5d |
|
| 2024/03/01 13:17 |
3172bc04679b Update go_github from v52 to v56 |
|
83acf9e0 |
|
| 2024/03/01 01:59 |
0da62368cb3a Add list of users to the gvisor website. |
|
352ab904 |
|
| 2024/02/29 12:44 |
c1f5fd07b955 `ollama` library: Use streaming mode when prompting. |
|
352ab904 |
|
| 2024/02/28 23:38 |
1d7b2b5c6fc7 Correct getdents64 syscall number for arm64 |
|
352ab904 |
|
| 2024/02/28 11:31 |
ccc3c2cbd26d Skip incremental checksum update for unmodified fields |
|
55d6f11d |
|
| 2024/02/28 06:42 |
ccc3c2cbd26d Skip incremental checksum update for unmodified fields |
|
d367cbe5 |
|
| 2024/02/27 17:37 |
bb7ed9175faa Fix GPU Support link on home page. |
|
d367cbe5 |
|
| 2024/02/27 15:29 |
da3eb80271d6 Fix #10046 |
|
d367cbe5 |
|
| 2024/02/26 23:20 |
da3eb80271d6 Fix #10046 |
|
05e69c83 |
|
| 2024/02/26 11:15 |
16dba7fa7677 systrap: handle stub thread crashes |
|
23536c23 |
|
| 2024/02/26 06:55 |
16dba7fa7677 systrap: handle stub thread crashes |
|
8d446f15 |
|
| 2024/02/25 05:05 |
6c1bd9c68970 Automated Code Change |
|
8d446f15 |
|
| 2024/02/24 05:55 |
e5ea3935bfd1 Automated rollback of changelist 609833006 |
|
8d446f15 |
|
| 2024/02/23 16:46 |
88f7bb66f0dc runsc:gofer: don't mount a new proc instance |
|
8d446f15 |
|
| 2024/02/23 03:43 |
9a02a687f06e Set -g0 to make cc_pie_obj produce deterministic output to help Bazel caching. |
|
8d446f15 |
|
| 2024/02/22 18:33 |
7f74a04a7959 Add a page about nvproxy on the website. |
|
bbb79582 |
|
| 2024/02/22 15:31 |
1303df5f706e Skip running the UDS lisafs test for runsc/fsgofer. |
|
bbb79582 |
|
| 2024/02/22 03:21 |
1303df5f706e Skip running the UDS lisafs test for runsc/fsgofer. |
|
345111b5 |
|
| 2024/02/21 19:02 |
72f11d689841 Replace "if" statement in pipeline file with source_test_continuous invocation |
|
9e510875 |
|
| 2024/02/21 15:18 |
6a30f335135a Deprecate --nvproxy-docker flag. |
|
9e510875 |
|
| 2024/02/21 08:12 |
6a30f335135a Deprecate --nvproxy-docker flag. |
|
3af7dd65 |
|
| 2024/02/20 19:06 |
f4a83e6c2670 Disable flaky tests with S/R. |
|
3af7dd65 |
|
| 2024/02/19 23:21 |
53d2b511e78e Change remaining test targets to use select_gtest() to choose the gtest target |
|
3af7dd65 |
|
| 2024/02/19 11:17 |
53d2b511e78e Change remaining test targets to use select_gtest() to choose the gtest target |
|
96e91f57 |
|
| 2024/02/17 02:15 |
53d2b511e78e Change remaining test targets to use select_gtest() to choose the gtest target |
|
578f7538 |
|
| 2024/02/16 13:06 |
aa1a66353af5 process_vm_{read,write}v returns EFAILT if iov-s describe inaccessible memory |
|
578f7538 |
|
| 2024/02/15 23:40 |
70eab35731cf Add missing word in gvisor docs for readable prose |
|
578f7538 |
|
| 2024/02/15 18:43 |
70eab35731cf Add missing word in gvisor docs for readable prose |
|
fd39cf6f |
|
| 2024/02/15 11:38 |
568434b39717 Enable S/R for all syscall tests. |
|
fd39cf6f |
|
| 2024/02/14 23:52 |
568434b39717 Enable S/R for all syscall tests. |
|
d9b1cdd5 |
|
| 2024/02/14 11:45 |
f47911271957 Qualify Nvidia driver 535.154.05. |
|
625bd0b0 |
|
| 2024/02/13 23:30 |
5300f3d30597 Don't use xgetbv on CPUs that don't support it. |
|
d902085f |
|
| 2024/02/13 21:10 |
5300f3d30597 Don't use xgetbv on CPUs that don't support it. |
|
e66542d7 |
|
| 2024/02/13 11:29 |
c2bcdb73aa6e Fix bug that prevents collecting traces without also collecting a profile. |
|
e66542d7 |
|
| 2024/02/12 19:54 |
c2bcdb73aa6e Fix bug that prevents collecting traces without also collecting a profile. |
|
77b23aa1 |
|
| 2024/02/10 04:24 |
cd6c646b1a9a Run docker-tests with default flags. |
|
77b23aa1 |
|
| 2024/02/09 15:20 |
59a057980d9b Minor FPU save/restore fixes. |
|
77b23aa1 |
|
| 2024/02/09 13:30 |
59a057980d9b Minor FPU save/restore fixes. |
|
7f07e9b0 |
|
| 2024/02/08 23:58 |
f282345e8cd8 Send error to subprocess in case of invalid shared memory. |
|
7f07e9b0 |
|
| 2024/02/08 18:19 |
f282345e8cd8 Send error to subprocess in case of invalid shared memory. |
|
e8e30238 |
|
| 2024/02/08 11:51 |
1ebf17e9d9c8 Fix S/R support for fuse structs. |
|
e8e30238 |
|
| 2024/02/08 02:55 |
1ebf17e9d9c8 Fix S/R support for fuse structs. |
|
6404acf9 |
|
| 2024/02/07 13:45 |
38d33704ae18 Enable S/R for runsc syscall tests. |
|
6404acf9 |
|
| 2024/02/07 00:35 |
fe66cae2edc7 Enumerate known systrap stub failures to exit process cleanly. |
|
6404acf9 |
|
| 2024/02/06 11:16 |
9defeeaf093a `seccomp`: Check that programs that are too large are rejected. |
|
6404acf9 |
|
| 2024/02/05 21:52 |
10498cb8d4ee g3doc: fix a title of docker-in-gke-sandbox.md |
|
6404acf9 |
|
| 2024/02/05 17:08 |
10498cb8d4ee g3doc: fix a title of docker-in-gke-sandbox.md |
|
e23e8c20 |
|
| 2024/02/05 09:50 |
b07b6076cb79 Fix the ref leaks with S/R. |
|
e23e8c20 |
|
| 2024/02/03 09:19 |
b07b6076cb79 Fix the ref leaks with S/R. |
|
a67b2c42 |
|
| 2024/02/03 00:13 |
f63e3b27965f `dumpfilter`: Add flag to turn seccomp-bpf optimizations on or off. |
|
60bf9982 |
|
| 2024/02/02 11:01 |
8ad4ae61ca64 Add cover image for gVisor seccomp blog post. |
|
60bf9982 |
|
| 2024/02/01 22:49 |
67f4cf66f72d test/runtime/java: skip CertPathBuilder/akiExt/AKISerialNumber.java |
|
d61103fc |
|
| 2024/02/01 10:48 |
2c8e77f5c1d2 Merge pull request #9945 from avagin:gvisor-in-gke |
|
81024119 |
|
| 2024/02/01 01:19 |
a5f0778c3895 Add a hello world docker image test for rust runtime. |
|
373b66cd |
|
| 2024/01/31 12:08 |
0602d517c52c Merge pull request #9939 from kevinGC:push-tunvmxtwumxm |
|
373b66cd |
|
| 2024/01/30 22:49 |
80af63b5e35b Use infinite timeout on Fuchsia |
|
373b66cd |
|
| 2024/01/30 19:51 |
80af63b5e35b Use infinite timeout on Fuchsia |
|
7f400fcb |
|
| 2024/01/30 10:47 |
aa8e121e8d34 Add test for cl/601911295. |
|
7f400fcb |
|
| 2024/01/30 00:24 |
aa8e121e8d34 Add test for cl/601911295. |
|
991a98f4 |
|
| 2024/01/29 09:22 |
23736c31c96d Add rust to tested images at gVisor's compatibility page. |
|
991a98f4 |
|
| 2024/01/29 06:39 |
23736c31c96d Add rust to tested images at gVisor's compatibility page. |
|
cc4a4020 |
|
| 2024/01/27 09:04 |
a9bdef23522b More accurately replicate Linux's Unix domain socket event notification. |
|
cc4a4020 |
|
| 2024/01/26 19:54 |
a940627a74b5 Merge pull request #9925 from avagin:bazel-update |
|
cc4a4020 |
|
| 2024/01/25 22:09 |
8d37113049ac Enable collection of go traces during benchmarks. |
|
cc4a4020 |
|
| 2024/01/25 14:23 |
d788c40b192d Fix NV0080_CTRL_CMD_GPU_GET_CLASSLIST to use RMAPI_PARAM_COPY_MAX_PARAMS_SIZE. |
|
cc4a4020 |
|
| 2024/01/25 01:07 |
d788c40b192d Fix NV0080_CTRL_CMD_GPU_GET_CLASSLIST to use RMAPI_PARAM_COPY_MAX_PARAMS_SIZE. |
|
1e153dc8 |
|
| 2024/01/24 11:53 |
f82d97c9ee1a Only reset tty.tg to nil when its controlling process is being released. |
|
1e153dc8 |
|
| 2024/01/23 22:43 |
ff8ea9b2b977 sentry: remove unnecessary NAT TODOs |
|
1e153dc8 |
|
| 2024/01/23 18:37 |
9db874189a17 xdp: user real BPF helper functions, not a hacky forward definition |
|
1e153dc8 |
|
| 2024/01/23 06:35 |
9db874189a17 xdp: user real BPF helper functions, not a hacky forward definition |
|
1c0ecc51 |
|
| 2024/01/22 23:05 |
9db874189a17 xdp: user real BPF helper functions, not a hacky forward definition |
|
ef013115 |
|
| 2024/01/22 18:32 |
7b151e25d076 Don't drop the mountpoint reference in already umounted dead mountpoints. |
|
ef013115 |
|
| 2024/01/20 11:35 |
7b151e25d076 Don't drop the mountpoint reference in already umounted dead mountpoints. |
|
9bd8dcda |
|
| 2024/01/19 22:18 |
2de5431306f7 Update the ruby image |
|
9bd8dcda |
|
| 2024/01/19 14:45 |
bb840068163c Fixup AMX workaround for ptrace. |
|
9bd8dcda |
|
| 2024/01/19 07:27 |
bb840068163c Fixup AMX workaround for ptrace. |
|
21772ce4 |
|
| 2024/01/18 18:23 |
e9bdc76c02bd Exclude AMX extended state from being xsave/xrstor'd. |
|
21772ce4 |
|
| 2024/01/17 09:48 |
588d87b40a36 Add a unit test for sentry sysfs PCI mirroring. |
|
c9a1c95b |
|
| 2024/01/17 08:54 |
588d87b40a36 Add a unit test for sentry sysfs PCI mirroring. |
|
2a7bcc7f |
|
| 2024/01/16 19:34 |
be48200c0edf Re-order loads in BUILD files to make transformations reversible in Copybara. |
|
2a7bcc7f |
|
| 2024/01/15 11:22 |
5eaa66a2ed33 Fix ipv4.endpoint.AddAndAcquirePermanentAddress() to write lock endpoint mutex. |
|
2a7bcc7f |
|
| 2024/01/13 14:14 |
5eaa66a2ed33 Fix ipv4.endpoint.AddAndAcquirePermanentAddress() to write lock endpoint mutex. |
|
551587c1 |
|
| 2024/01/13 00:54 |
49f7ee9e926a systrap: Rename fpState to fastpath. |
|
551587c1 |
|
| 2024/01/12 21:13 |
49f7ee9e926a systrap: Rename fpState to fastpath. |
|
f6fa7c28 |
|
| 2024/01/12 12:51 |
39afbf09cdca Fix connectionedEndpoint.Readiness() to return EPOLL{RD}HUP appropriately. |
|
f6fa7c28 |
|
| 2024/01/12 03:44 |
39afbf09cdca Fix connectionedEndpoint.Readiness() to return EPOLL{RD}HUP appropriately. |
|
dda5a988 |
|
| 2024/01/11 14:29 |
8053cd8f0bf6 Add mount locking. |
|
dda5a988 |
|
| 2024/01/11 13:38 |
8053cd8f0bf6 Add mount locking. |
|
00f3cc59 |
|
| 2024/01/11 00:25 |
94e83c674e65 Properly account for all lower level headers when setting GSO limit. |
|
00f3cc59 |
|
| 2024/01/10 19:50 |
94e83c674e65 Properly account for all lower level headers when setting GSO limit. |
|
04815ef1 |
|
| 2024/01/10 12:23 |
9e364f4c23ec Mount IOMMU groups at chroot. |
|
04815ef1 |
|
| 2024/01/10 00:19 |
9e364f4c23ec Mount IOMMU groups at chroot. |
|
b438bd66 |
|
| 2024/01/09 12:22 |
af80b6898e9b Close directfs dentry's control FD on gofer filesystem Release(). |
|
4807fb37 |
|
| 2024/01/09 01:22 |
58cbc1af952b Modify cgroup tests to make the tests pass with the new behavior. |
|
4c0fd4bb |
|
| 2024/01/08 11:24 |
1e61310ce61e `seccomp-bpf`: Render syscall rules after binary search tree traversal code. |
|
4c0fd4bb |
|
| 2024/01/05 17:48 |
1e61310ce61e `seccomp-bpf`: Render syscall rules after binary search tree traversal code. |
|
d0304e9c |
|
| 2024/01/05 07:26 |
1e61310ce61e `seccomp-bpf`: Render syscall rules after binary search tree traversal code. |
|
28c42cff |
|
| 2024/01/04 18:12 |
5c41ffabdb64 Fix select call in socket utils |
|
28c42cff |
|
| 2024/01/04 05:01 |
20973549be1a BPF optimizer: Refactor removal operations across optimizers. |
|
28c42cff |
|
| 2024/01/03 15:40 |
9425d102e515 Make `runsc` log header more helpful. |
|
28c42cff |
|
| 2024/01/03 09:20 |
9425d102e515 Make `runsc` log header more helpful. |
|
fb427a07 |
|
| 2024/01/02 20:07 |
65783256ca99 Fix fdnotifier.AddFD() to handle the case when queue already has events. |
|
fb427a07 |
|
| 2023/12/29 09:27 |
de71aae89aed `seccomp`: Use dedicated input buffer for populating seccomp cache. |
|
fb427a07 |
|
| 2023/12/28 20:14 |
f3864daf7a1c Merge pull request #9840 from tianyuzhou95:albert-doc |
|
fb427a07 |
|
| 2023/12/22 15:13 |
149350e5c428 xdp: fix race found by gotsan |
|
fb427a07 |
|
| 2023/12/22 03:20 |
149350e5c428 xdp: fix race found by gotsan |
|
4f9530a3 |
|
| 2023/12/21 14:10 |
f76d64021e0c xdp: update the incorrectly named "Readonly*" names |
|
4f9530a3 |
|
| 2023/12/21 01:09 |
8b054cadc548 Use infinite timeouts for Fuchsia in syscall test |
|
4f9530a3 |
|
| 2023/12/20 18:40 |
8b054cadc548 Use infinite timeouts for Fuchsia in syscall test |
|
3da2432f |
|
| 2023/12/20 13:05 |
b559b8840254 Get cpu usage from cgroups in runsc. |
|
3da2432f |
|
| 2023/12/19 05:21 |
b559b8840254 Get cpu usage from cgroups in runsc. |
|
3ad490ea |
|
| 2023/12/18 17:20 |
3406ebbb75cd Remove unused gonet.UDPConn.stack field. |
|
924661f4 |
|
| 2023/12/18 16:40 |
f6d380ad8c35 xdp: add a program that redirects packets from a NIC to an AF_XDP socket |
|
924661f4 |
|
| 2023/12/14 17:57 |
f6d380ad8c35 xdp: add a program that redirects packets from a NIC to an AF_XDP socket |
|
3222d10c |
|
| 2023/12/14 04:43 |
29234bc44b51 Mount cgroups per container in runsc. |
|
3222d10c |
|
| 2023/12/13 19:42 |
b373c8e11243 Mark nvproxy.objsLive as not savable. |
|
ce0359fb |
|
| 2023/12/13 16:33 |
07e86e27b07a Add ollama GPU test. |
|
ce0359fb |
|
| 2023/12/12 23:52 |
07e86e27b07a Add ollama GPU test. |
|
ebcad15c |
|
| 2023/12/12 10:50 |
b3bb6faf7851 Remove kernel.Kernel.savedMFOwners. |
|
ebcad15c |
|
| 2023/12/12 09:18 |
b3bb6faf7851 Remove kernel.Kernel.savedMFOwners. |
|
28b24332 |
|
| 2023/12/11 20:02 |
a047cde5e67b Add checkpoint/restore e2e test for overlay configurations. |
|
28b24332 |
|
| 2023/12/10 19:40 |
0bdb383c2467 Constraint x86 image push job to amd64 machines. |
|
28b24332 |
|
| 2023/12/08 18:01 |
f4b851067a3a Un-delete devtmpfs. |
|
28b24332 |
|
| 2023/12/08 04:51 |
d7a3ec8305f0 Allow vfio releted subdirectories to be mirrored by gVisor. |
|
28b24332 |
|
| 2023/12/07 15:42 |
047cabf457ab Merge pull request #9700 from thundergolfer:master |
|
28b24332 |
|
| 2023/12/07 11:57 |
94b04833937c Disable FstatfsTest.BlocksFree in statfs_test_native. |
|
28b24332 |
|
| 2023/12/07 00:10 |
94b04833937c Disable FstatfsTest.BlocksFree in statfs_test_native. |
|
e3299f55 |
|
| 2023/12/06 11:50 |
063000448f40 Make gVisor search for all potential registered TPU devices. |
|
95293603 |
|
| 2023/12/06 08:12 |
063000448f40 Make gVisor search for all potential registered TPU devices. |
|
858d62d1 |
|
| 2023/12/05 19:03 |
3517ac4c0bcd Cancel multicast delayed report job on Disable |
|
858d62d1 |
|
| 2023/12/05 13:57 |
e1d2ce8cfa4d Move GPU test utilities to its own package. |
|
858d62d1 |
|
| 2023/12/05 05:09 |
e1d2ce8cfa4d Move GPU test utilities to its own package. |
|
f819d6f7 |
|
| 2023/12/04 15:54 |
73fe5bffafcd gvisor: update traceBlockReason for new runtime tracer |
|
f819d6f7 |
|
| 2023/12/02 10:30 |
126ee58746d1 Register TPU v5e devices when booting gVisor. |
|
f819d6f7 |
|
| 2023/12/01 21:19 |
7b8b28e76c5d Add registerTPUDevice which registers all supported TPU devices. |
|
f819d6f7 |
|
| 2023/12/01 04:53 |
479d60c2258b Merge pull request #9784 from avagin:make-docker-reload-wait |
|
f819d6f7 |
|
| 2023/11/30 15:34 |
bcbb32955ed9 Fix seccomp debugging tip to work with precompiled filters. |
|
f819d6f7 |
|
| 2023/11/30 02:22 |
a880da69f277 `seccomp`: Optimize common 32-bit matchers away from disjunctions. |
|
f819d6f7 |
|
| 2023/11/29 14:30 |
2d90b66af167 Add checkpoint/restore support for tmpfs with file backend. |
|
6e78f9ce |
|
| 2023/11/29 02:23 |
b4ef4364532d iptables: use log package to get timestamps in tests |
|
1adfb6f6 |
|
| 2023/11/28 14:26 |
94c0d777aba5 Merge pull request #9749 from profawk:clear-builtin |
|
9fd50251 |
|
| 2023/11/28 02:03 |
7cf14b7c8b5e Add equality function for BPF instructions. |
|
9fe51b7c |
|
| 2023/11/28 01:51 |
7cf14b7c8b5e Add equality function for BPF instructions. |
|
7ec6c044 |
|
| 2023/11/27 13:47 |
815dade355a3 Add vfioFD skeleton code for TPU v5e. |
|
7ec6c044 |
|
| 2023/11/25 08:51 |
815dade355a3 Add vfioFD skeleton code for TPU v5e. |
|
5b429f39 |
|
| 2023/11/23 17:07 |
722ddab51ebf Mount VFIO based TPU device directories in chroot. |
|
5b429f39 |
|
| 2023/11/23 02:50 |
722ddab51ebf Mount VFIO based TPU device directories in chroot. |
|
fc59b78e |
|
| 2023/11/23 02:04 |
e54bfde79278 Use 16-byte secret for SHA2 |
|
fc59b78e |
|
| 2023/11/22 13:58 |
e54bfde79278 Use 16-byte secret for SHA2 |
|
03e12510 |
|
| 2023/11/22 12:07 |
e54bfde79278 Use 16-byte secret for SHA2 |
|
cb976f63 |
|
| 2023/11/21 22:47 |
c16916e7d780 Move lockMountpoint to the beginning of pivot_root. |
|
cb976f63 |
|
| 2023/11/21 09:40 |
f956b5ac17ae Use cryptographic hash functions for TCP |
|
cb976f63 |
|
| 2023/11/20 20:29 |
704543b8f338 Ensure empty VFSPipeFD.SpliceToNonPipe(/dev/null) returns ErrWouldBlock. |
|
cb976f63 |
|
| 2023/11/18 12:35 |
88d35cd8f13a segment.Set API improvements. |
|
cb976f63 |
|
| 2023/11/17 23:24 |
2ef56fee9433 Seccomp filters: Add method to uniquely identify the seccomp configuration. |
|
cb976f63 |
|
| 2023/11/17 10:13 |
2bc70b209b60 `seccomp`: Don't treat variables that are optimized away as unused. |
|
cb976f63 |
|
| 2023/11/16 21:02 |
77b137ffd8ec Fix umount not unmounting all the mounts it is supposed to. |
|
cb976f63 |
|
| 2023/11/16 07:54 |
201a046299b7 `seccomp`: Enforce that Sentry filters match against reference program. |
|
cb976f63 |
|
| 2023/11/15 18:43 |
ceb1b69e35ec runsc: don't scrape iptables rules by default |
|
cb976f63 |
|
| 2023/11/15 05:32 |
3ab01aedb874 Refactor the umount algorithm. |
|
cb976f63 |
|
| 2023/11/14 16:22 |
7ac1ecc9c523 Do not pass MS_REC with MS_BIND|MS_REMOUNT while setting up gofer rootfs. |
|
cb976f63 |
|
| 2023/11/14 03:15 |
03d35d400f76 Automated rollback of changelist 580649803 |
|
cb976f63 |
|
| 2023/11/13 14:06 |
8c52800156e2 Add a syscall test exercising dualstack address family mismatches |
|
cb976f63 |
|
| 2023/11/13 13:21 |
8c52800156e2 Add a syscall test exercising dualstack address family mismatches |
|
6d6dbf8a |
|
| 2023/11/12 14:18 |
c46ffacf2f11 Separate out rule optimizers from main syscall rendering. |
|
6d6dbf8a |
|
| 2023/11/12 01:08 |
a69a4835f277 netstack: iptables DNAT revision 1 support |
|
6d6dbf8a |
|
| 2023/11/11 12:02 |
62175dea49c8 `seccomp.BuildProgram`: Add `ProgramOptions` struct. |
|
6d6dbf8a |
|
| 2023/11/10 23:59 |
dbf8cbbe8344 Remove MM.privateRefs. |
|
d80eec66 |
|
| 2023/11/10 12:13 |
56be4a99210f `seccomp`: Add method to `ValueMatcher` to generate fuzz test cases. |
|
910357f9 |
|
| 2023/11/09 23:51 |
3ec902d1a6b6 Merge pull request #9486 from btw616:erofs-CR-and-rootfs-support |
|
45e9b83e |
|
| 2023/11/09 11:42 |
68cdc8837840 Implement the fs.nr_open sysctl |
|
1d21e169 |
|
| 2023/11/09 10:56 |
68cdc8837840 Implement the fs.nr_open sysctl |
|
4862372a |
|
| 2023/11/08 21:40 |
65e518c7412d proc: limit a comm len to TASK_COMM_LEN |
|
4862372a |
|
| 2023/11/08 15:59 |
65e518c7412d proc: limit a comm len to TASK_COMM_LEN |
|
b93f63e8 |
|
| 2023/11/08 09:38 |
9115b8d57c56 Fix debug message. |
|
b93f63e8 |
|
| 2023/11/08 01:55 |
9115b8d57c56 Fix debug message. |
|
83211397 |
|
| 2023/11/07 12:42 |
b988b579215e runsc: reproduce NAT table inside gVisor only when non-default |
|
83211397 |
|
| 2023/11/06 23:22 |
c2dd6140f452 `embeddedbinary`: Skip compression unless using `--compilation_mode=opt`. |
|
83211397 |
|
| 2023/11/06 19:54 |
c2dd6140f452 `embeddedbinary`: Skip compression unless using `--compilation_mode=opt`. |
|
78fae24e |
|
| 2023/11/06 11:17 |
42b69d0151b7 Get limits from parent in cgroupv2 when max is specified in leaf cgroup node. |
|
78fae24e |
|
| 2023/11/04 02:27 |
42b69d0151b7 Get limits from parent in cgroupv2 when max is specified in leaf cgroup node. |
|
500bfdc4 |
|
| 2023/11/03 13:19 |
aeaee7166900 setsid() should return the session id. |
|
500bfdc4 |
|
| 2023/11/03 12:11 |
aeaee7166900 setsid() should return the session id. |
|
c4ac074c |
|
| 2023/11/02 22:57 |
9aca9a74291f Elide WriteGS if the GS is already correct. |
|
c4ac074c |
|
| 2023/11/02 18:58 |
9aca9a74291f Elide WriteGS if the GS is already correct. |
|
b5f07fd3 |
|
| 2023/11/02 10:55 |
8f9211abca9c Close gofer filestore FDs in failure cases. |
|
b5f07fd3 |
|
| 2023/11/02 00:59 |
8f9211abca9c Close gofer filestore FDs in failure cases. |
|
69904c9f |
|
| 2023/11/01 11:50 |
4a8f42267b66 Seccomp: Test that `ioctl`'s zeroth arg is always a non-negative FD. |
|
69904c9f |
|
| 2023/10/31 22:33 |
41614ddfa150 `seccomp`: Add `And` as a logical AND between multiple syscall rules. |
|
69904c9f |
|
| 2023/10/31 10:26 |
ba53672288fb Fix cudaMallocManaged() on nvproxy. |
|
0badc11c |
|
| 2023/10/30 22:24 |
0ed91ba4b8ab Fix issue w/ buildkite pipelines. |
|
b5729d82 |
|
| 2023/10/30 19:54 |
0ed91ba4b8ab Fix issue w/ buildkite pipelines. |
|
116af91f |
|
| 2023/10/30 10:20 |
83f75082e5b0 nestack: use cryptographically secure RNG when appropriate |
|
116af91f |
|
| 2023/10/29 09:14 |
83f75082e5b0 nestack: use cryptographically secure RNG when appropriate |
|
3c418d72 |
|
| 2023/10/28 20:09 |
fd9845ccea9b Fix NV_MEMORY_FABRIC for 535.43.02+ drivers. |
|
3c418d72 |
|
| 2023/10/28 01:19 |
1918283b0300 Test docker in gVisor |
|
3c418d72 |
|
| 2023/10/27 13:07 |
b357d718289a TIOCSCTTY has to succeed if a specified tty is a controlling one already |
|
d0fab643 |
|
| 2023/10/27 11:06 |
b357d718289a TIOCSCTTY has to succeed if a specified tty is a controlling one already |
|
bf285f0c |
|
| 2023/10/26 21:47 |
5ec15266da43 Reduce TestMultiContainerMemoryLeakStress flakiness. |
|
bf285f0c |
|
| 2023/10/26 09:43 |
3574bdd75034 Make GPU tests on presubmit use only latest driver. |
|
b67a3ce3 |
|
| 2023/10/26 06:23 |
3574bdd75034 Make GPU tests on presubmit use only latest driver. |
|
72e794c4 |
|
| 2023/10/25 17:15 |
ecbf37d03726 BPF: Add "instrumented execution" mode. |
|
72e794c4 |
|
| 2023/10/25 16:51 |
d4973670c3c9 `bpf`: Remove `Input` interface and simply use bytes as the input. |
|
72e794c4 |
|
| 2023/10/25 04:54 |
d4973670c3c9 `bpf`: Remove `Input` interface and simply use bytes as the input. |
|
17e6d526 |
|
| 2023/10/24 19:33 |
d377e4537685 netlink: allow to up/down interfaces via RTM_NEWLINK |
|
7256c5bd |
|
| 2023/10/24 16:47 |
ea4f0073d4a1 Fix data race between getting mount options and updating mount options. |
|
7256c5bd |
|
| 2023/10/24 09:37 |
ea4f0073d4a1 Fix data race between getting mount options and updating mount options. |
|
af8d2e46 |
|
| 2023/10/23 20:35 |
59af1edc780e Add script to run gpu test for all supported driver versions. |
|
af8d2e46 |
|
| 2023/10/23 18:28 |
59af1edc780e Add script to run gpu test for all supported driver versions. |
|
989a3687 |
|
| 2023/10/23 08:34 |
57606c7aa115 tcp_benchmark: prevent "cheating" with splice |
|
989a3687 |
|
| 2023/10/21 03:01 |
57606c7aa115 tcp_benchmark: prevent "cheating" with splice |
|
361b23dc |
|
| 2023/10/20 13:37 |
54ef8c70dd20 Add cos_gpu_test that will run GPU container on COS. |
|
361b23dc |
|
| 2023/10/20 10:17 |
54ef8c70dd20 Add cos_gpu_test that will run GPU container on COS. |
|
a42250d2 |
|
| 2023/10/19 20:55 |
9304ed401fd9 Remove unused images. |
|
a42250d2 |
|
| 2023/10/19 08:47 |
29a8856da7ba Create shared master mounts for volumes with share=container. |
|
f62755ed |
|
| 2023/10/18 21:06 |
e77deec46296 Use disk-backed tmpfs for disk-backed EmptyDir volumes. |
|
342b9c55 |
|
| 2023/10/18 07:57 |
d6e83e2802f9 Add nvidia installer tool for installing NVIDIA drivers in buildkite tests. |
|
342b9c55 |
|
| 2023/10/17 18:42 |
669edba5d9f4 `bpf`: Add benchmark for interpreter speed. |
|
342b9c55 |
|
| 2023/10/17 05:39 |
e69b01c3a8f3 Add command-line tool to quickly dump the Sentry BPF program. |
|
342b9c55 |
|
| 2023/10/16 16:21 |
289dc7ce1d71 Prefer routes with local addr on outgoing NIC only for local traffic |
|
342b9c55 |
|
| 2023/10/16 15:23 |
289dc7ce1d71 Prefer routes with local addr on outgoing NIC only for local traffic |
|
f757a323 |
|
| 2023/10/15 04:03 |
febb0656f347 Revamp shared mount container tests. |
|
f757a323 |
|
| 2023/10/14 14:58 |
2501d8282ddf Expand the concept of OverlayMedium to GoferMountConf. |
|
f757a323 |
|
| 2023/10/14 01:46 |
1a5aee553938 Handle deletion of self-backed filestores for shared mounts. |
|
f757a323 |
|
| 2023/10/13 13:40 |
c134ec92830b Merge pull request #9525 from avagin:bazel-update |
|
56b6c7c4 |
|
| 2023/10/13 11:47 |
c134ec92830b Merge pull request #9525 from avagin:bazel-update |
|
6388bc36 |
|
| 2023/10/12 22:42 |
da90797f0cb3 Zero `fd_set` in `select_benchmark` |
|
6388bc36 |
|
| 2023/10/12 10:29 |
c6a583126e2c socket/unix: Implemented the autobind feature |
|
3cefb144 |
|
| 2023/10/12 08:08 |
c6a583126e2c socket/unix: Implemented the autobind feature |
|
83165b57 |
|
| 2023/10/11 18:48 |
f7bfab20e08a Fix MountNamespaceSlavesNewUserNamespace test. |
|
83165b57 |
|
| 2023/10/11 00:21 |
4e5d7ff1ab7e `secbench`: Add benchmark for doing an ioctl with `nvproxy` enabled. |
|
83165b57 |
|
| 2023/10/10 11:11 |
71dc79e65349 `secbench`: Benchmark optimization duration and compression ratio. |
|
83165b57 |
|
| 2023/10/09 22:44 |
12bc9994b427 Introduce select_benchmark |
|
c9be5398 |
|
| 2023/10/09 17:31 |
12bc9994b427 Introduce select_benchmark |
|
f3a9f550 |
|
| 2023/10/09 10:40 |
98b368b7fa6f Merge pull request #9231 from google:dependabot/bundler/images/benchmarks/ruby/rack-2.2.8 |
|
f3a9f550 |
|
| 2023/10/08 23:51 |
98b368b7fa6f Merge pull request #9231 from google:dependabot/bundler/images/benchmarks/ruby/rack-2.2.8 |
|
5e837c76 |
|
| 2023/10/07 23:38 |
85701f569ba8 Merge pull request #9301 from google:dependabot/bundler/images/benchmarks/ruby/puma-5.6.7 |
|
5e837c76 |
|
| 2023/10/07 05:03 |
addac5f2487d Refactor seccomp rules with interfaces rather than disjunctive normal form. |
|
5e837c76 |
|
| 2023/10/06 20:23 |
07b9077bfdcc Introduce poll_benchmark |
|
ea12a918 |
|
| 2023/10/06 16:29 |
15cc3fcbbd77 Add RmAllocParamType interface for parameter types of NV_ESC_RM_ALLOC. |
|
ea12a918 |
|
| 2023/10/06 04:42 |
15cc3fcbbd77 Add RmAllocParamType interface for parameter types of NV_ESC_RM_ALLOC. |
|
db17ad9f |
|
| 2023/10/05 16:19 |
09be6cec5e98 `bpf`: Use optimizer for seccomp-bpf programs. |
|
becbb1de |
|
| 2023/10/05 14:35 |
09be6cec5e98 `bpf`: Use optimizer for seccomp-bpf programs. |
|
b7d7ff54 |
|
| 2023/10/05 01:17 |
d493e93763d0 Implement MS_SLAVE. |
|
b7d7ff54 |
|
| 2023/10/04 12:10 |
e16f83a45c9a Return part of mount options via the syscall statfs & fstatfs. |
|
b7d7ff54 |
|
| 2023/10/03 17:41 |
122923b14bac Add mount type check in TestOverlayByMountAnnotation. |
|
65faba36 |
|
| 2023/10/02 22:41 |
0e18a826d91d `stateify`: Add `+stateify identtype` tag for identical type definitions. |
|
65faba36 |
|
| 2023/10/02 10:38 |
0e18a826d91d `stateify`: Add `+stateify identtype` tag for identical type definitions. |
|
50b20e75 |
|
| 2023/09/29 12:30 |
0e18a826d91d `stateify`: Add `+stateify identtype` tag for identical type definitions. |
|
8e26a358 |
|
| 2023/09/28 22:39 |
0e18a826d91d `stateify`: Add `+stateify identtype` tag for identical type definitions. |
|
d265efd8 |
|
| 2023/09/28 10:37 |
0e18a826d91d `stateify`: Add `+stateify identtype` tag for identical type definitions. |
|
0aebb3ae |
|
| 2023/09/28 00:23 |
0e18a826d91d `stateify`: Add `+stateify identtype` tag for identical type definitions. |
|
c2ab1e5d |
|
| 2023/09/27 22:32 |
7594667507d7 Internal change. |
|
c2ab1e5d |
|
| 2023/09/27 10:31 |
7594667507d7 Internal change. |
|
2895a507 |
|
| 2023/09/27 00:52 |
7594667507d7 Internal change. |
|
0b6a67ac |
|
| 2023/09/26 03:18 |
485de2f6a71b test/syscalls: run tests in the single thread mode |
|
0b6a67ac |
|
| 2023/09/23 17:39 |
e81e0c72a70b Add NV_MEMORY_FABRIC to nvproxy. |
|
0b6a67ac |
|
| 2023/09/23 04:25 |
b5dea0ea0972 bazel: update bazel_gazelle to v0.33.0 |
|
0b6a67ac |
|
| 2023/09/22 14:47 |
19250b87ede7 Use the last NVIDIA_VISIBLE_DEVICES value from spec. |
|
0b6a67ac |
|
| 2023/09/22 01:27 |
05b7c55c1320 Do not interpret GPU index as GPU device minor. |
|
0b6a67ac |
|
| 2023/09/21 17:12 |
222147462633 Merge pull request #9406 from avagin:systrap-pdeathsig |
|
0b6a67ac |
|
| 2023/09/20 20:23 |
1531147bf2e9 Automated rollback of changelist 564000728 |
|
0b6a67ac |
|
| 2023/09/20 07:13 |
4cd842b20a3c Automated rollback of changelist 557941259 |
|
0b6a67ac |
|
| 2023/09/19 18:08 |
8675708cb835 Handle arbitrarily large Fuse Dirent Namelen. |
|
0b6a67ac |
|
| 2023/09/18 23:52 |
8a7617aed21c Move pytorch benchmark to GPU directory. |
|
0b6a67ac |
|
| 2023/09/16 10:02 |
313485846896 Tweaks to containerd tests and helpers. |
|
0b6a67ac |
|
| 2023/09/15 20:52 |
36b9b19daca9 Do not use abstract sockets for control server. |
|
0b6a67ac |
|
| 2023/09/15 07:47 |
b192bf37363f Handle large control socket paths. |
|
0b6a67ac |
|
| 2023/09/14 18:27 |
ad68fe1d68c5 images: use gcr.io/syzkaller/syzbot as the base for syzkaller images |
|
0b6a67ac |
|
| 2023/09/13 20:53 |
3dda3741d8eb Fix CodeQL so that it does not fail the github check. |
|
0b6a67ac |
|
| 2023/09/13 07:49 |
b86d06d7e51b Merge pull request #9215 from ekzhang:ekzhang/perf-nvidia-cli-info |
|
0b6a67ac |
|
| 2023/09/13 06:50 |
b86d06d7e51b Merge pull request #9215 from ekzhang:ekzhang/perf-nvidia-cli-info |
|
59da8366 |
|
| 2023/09/12 17:39 |
6d06f309ed5d Increase stale action ops per run. |
|
59da8366 |
|
| 2023/09/11 19:25 |
f8f2bb6d21ba Don't build tensorflow image on ARM. |
|
59da8366 |
|
| 2023/09/11 10:41 |
bb4410f44e32 Rollback 6ceceae9385c and 206e88db3653. |
|
59da8366 |
|
| 2023/09/09 14:01 |
bb4410f44e32 Rollback 6ceceae9385c and 206e88db3653. |
|
6654cf89 |
|
| 2023/09/08 21:28 |
717539fbd78a Return user_mss if user_mss is set and socket is unconnected. |
|
6654cf89 |
|
| 2023/09/08 12:58 |
ad275a100e58 Fix debug builds. |
|
6654cf89 |
|
| 2023/09/08 00:55 |
ad275a100e58 Fix debug builds. |
|
72324844 |
|
| 2023/09/07 11:49 |
c215e67a50f8 Let devices cgroup add/remove rules via devices.allow and devices.deny. |
|
72324844 |
|
| 2023/09/06 22:33 |
2319f958fc93 Automated rollback of changelist 536743330 |
|
72324844 |
|
| 2023/09/06 11:00 |
c227d185a4c5 Emit SentryTcpListenEvent when the application listens on a tcp port. |
|
736a3c37 |
|
| 2023/09/05 23:17 |
e0029cc0ff4b A few fixes to run tests on 6.2+ kernels |
|
0b6286dc |
|
| 2023/09/04 21:53 |
c2a7efe6a230 Clean up mount tests. |
|
0b6286dc |
|
| 2023/09/04 09:48 |
c2a7efe6a230 Clean up mount tests. |
|
db3306a6 |
|
| 2023/09/01 00:40 |
c2a7efe6a230 Clean up mount tests. |
|
696ea0d2 |
|
| 2023/08/31 12:38 |
c2a7efe6a230 Clean up mount tests. |
|
4ad3538b |
|
| 2023/08/31 04:11 |
c2a7efe6a230 Clean up mount tests. |
|
84803932 |
|
| 2023/08/30 14:56 |
18961d06f160 Verify that the `Container` and `Sandbox` types are JSON-serializable. |
|
84803932 |
|
| 2023/08/30 03:00 |
268b43d1b26f tmpfs: Allow non-standard xattr prefixes. |
|
b42ca3a7 |
|
| 2023/08/29 14:28 |
440b37a5c140 Add profiling metric flags to output metric data to local TSV file. |
|
bb79e24d |
|
| 2023/08/29 08:37 |
440b37a5c140 Add profiling metric flags to output metric data to local TSV file. |
|
7ba13a15 |
|
| 2023/08/28 19:29 |
2ba23f3ae45b Migrate Automatic Exec Groups by adding a toolchain parameter to the affected actions |
|
7ba13a15 |
|
| 2023/08/26 04:00 |
2c7778ecca7e Support MS_STRICTATIME flag for the syscall mount. |
|
7ba13a15 |
|
| 2023/08/25 14:48 |
d3b19e94842e proc: add /proc/{bus,fs,irq,sysrq-trigger} |
|
7ba13a15 |
|
| 2023/08/25 02:58 |
62fae3001634 proc: add /proc/sys/kernel/cap_last_cap |
|
49be837e |
|
| 2023/08/24 14:35 |
356c4f86016c Internal change. |
|
6f19564f |
|
| 2023/08/24 14:28 |
356c4f86016c Internal change. |
|
4d7ae7ab |
|
| 2023/08/23 14:50 |
e8c1fff214d0 `runsc metric-server`: Move metric server to its own binary. |
|
4d7ae7ab |
|
| 2023/08/23 02:05 |
e8c1fff214d0 `runsc metric-server`: Move metric server to its own binary. |
|
b81ca3f6 |
|
| 2023/08/22 12:37 |
baf097a14df6 netstack: refactor IPv4 source address selection |
|
b81ca3f6 |
|
| 2023/08/22 08:24 |
baf097a14df6 netstack: refactor IPv4 source address selection |
|
6b415825 |
|
| 2023/08/21 19:09 |
485265c9c814 Merge pull request #9296 from 0o001:master |
|
6b415825 |
|
| 2023/08/21 15:15 |
755c1f242cd4 nsfs: mark inodes as anonymous |
|
6b415825 |
|
| 2023/08/20 22:49 |
755c1f242cd4 nsfs: mark inodes as anonymous |
|
d216d8a0 |
|
| 2023/08/20 09:34 |
51f60d6d14c2 Add device cgroup's devices.list, which defaults to allow all. |
|
d216d8a0 |
|
| 2023/08/19 09:48 |
4455d3305e5e vfs: Introduce the rootfs mount |
|
d216d8a0 |
|
| 2023/08/18 20:34 |
9ee64caa00e2 Rearrange fio tests cases so regexs aren't ridiculous. |
|
d216d8a0 |
|
| 2023/08/18 08:16 |
960b564a6840 Fix small mount propagation bug. |
|
937e0ad7 |
|
| 2023/08/18 07:16 |
960b564a6840 Fix small mount propagation bug. |
|
74b106b6 |
|
| 2023/08/17 17:54 |
dc0093bb24ff Merge pull request #9283 from tianyuzhou95:albert-socket |
|
74b106b6 |
|
| 2023/08/16 12:43 |
8f0c59c3fa00 Mount has to follow symlinks when it resolves `target` |
|
c89b162d |
|
| 2023/08/16 12:05 |
8f0c59c3fa00 Mount has to follow symlinks when it resolves `target` |
|
39990d51 |
|
| 2023/08/15 22:55 |
16dc811cb73d Fix expected import path for Go cmd/vendor packages. |
|
39990d51 |
|
| 2023/08/15 07:19 |
6a4a48e6db20 Refactor and simplify propagation logic. |
|
39990d51 |
|
| 2023/08/14 17:58 |
8de4ec70bdc3 Internal change. |
|
39990d51 |
|
| 2023/08/11 23:24 |
2ce5c336d382 Add missing device cgroups. |
|
39990d51 |
|
| 2023/08/11 10:14 |
31b8262ce0df Merge pull request #9146 from sitano:ivan_nocompressio |
|
39990d51 |
|
| 2023/08/11 02:19 |
2f93ddbe6276 Create kernel.SendExternalSignalProcessGroup and use it in boot/loader.go |
|
da3c3ef8 |
|
| 2023/08/10 13:02 |
324735cfc004 Update docker packages to new moby repo. |
|
da3c3ef8 |
|
| 2023/08/10 01:44 |
582bf0d72d96 Add disk usage monitoring to BuildKite script. |
|
a1790533 |
|
| 2023/08/10 00:43 |
821459c94264 systrap: Enable using xsaveopt. |
|
a1790533 |
|
| 2023/08/09 12:40 |
821459c94264 systrap: Enable using xsaveopt. |
|
13ca4cd6 |
|
| 2023/08/09 00:57 |
821459c94264 systrap: Enable using xsaveopt. |
|
8ad1a287 |
|
| 2023/08/08 12:34 |
32537556ff22 Add test coverage for RTM_NEWROUTE & RTM_DELROUTE |
|
3c27dfcd |
|
| 2023/08/08 11:00 |
32537556ff22 Add test coverage for RTM_NEWROUTE & RTM_DELROUTE |
|
b1b6ae3d |
|
| 2023/08/07 21:50 |
8ff6816f078f Implementing CopyInN |
|
b1b6ae3d |
|
| 2023/08/07 18:51 |
8ff6816f078f Implementing CopyInN |
|
0ef3dfda |
|
| 2023/08/07 09:49 |
e89e40fded55 Implement setns CLONE_NEWUTS namespace type. |
|
0ef3dfda |
|
| 2023/08/06 22:44 |
e89e40fded55 Implement setns CLONE_NEWUTS namespace type. |
|
4ffcc9ef |
|
| 2023/08/05 02:11 |
8f6af3062d21 Merge pull request #9235 from avagin:bazel-update |
|
4ffcc9ef |
|
| 2023/08/04 16:20 |
118a17d92dcf kernfs: set DenySpliceIn for DynamicBytesFD |
|
5aed0249 |
|
| 2023/08/04 13:32 |
6f978d71856e kernel: GetMountNamespace has to check that mntns isn't nil |
|
5aed0249 |
|
| 2023/08/04 01:49 |
6f978d71856e kernel: GetMountNamespace has to check that mntns isn't nil |
|
74621247 |
|
| 2023/08/03 17:52 |
b4aeb6cd0ced remove unnecessary build tags |
|
b95100df |
|
| 2023/08/03 13:29 |
17e10cc47df7 Add NV0000_CTRL_CMD_SYSTEM_GET_P2P_CAPS to nvproxy. |
|
b95100df |
|
| 2023/08/03 01:28 |
17e10cc47df7 Add NV0000_CTRL_CMD_SYSTEM_GET_P2P_CAPS to nvproxy. |
|
39a91c18 |
|
| 2023/08/02 13:37 |
17e10cc47df7 Add NV0000_CTRL_CMD_SYSTEM_GET_P2P_CAPS to nvproxy. |
|
b178af49 |
|
| 2023/08/02 01:38 |
abe7cee09692 kernel: don't use atomic pointers for task.netns |
|
df07ffe8 |
|
| 2023/08/01 14:38 |
ab7259268b10 Add devices cgroups which is partially implemented. It could export the device cgroups to devices.deny and devices.allow, add/remove device cgroups rules will need to be implemented to fully support device cgroups. |
|
df07ffe8 |
|
| 2023/08/01 10:13 |
ab7259268b10 Add devices cgroups which is partially implemented. It could export the device cgroups to devices.deny and devices.allow, add/remove device cgroups rules will need to be implemented to fully support device cgroups. |
|
2a0d0f29 |
|
| 2023/07/31 20:58 |
3275e9086cb8 Exclude internet/test-inspector-help-page.js nodejs runtime test. |
|
2a0d0f29 |
|
| 2023/07/31 20:17 |
3924579214c2 `nginx` config: Remove `worker_processes` and `events.worker_connections`. |
|
2a0d0f29 |
|
| 2023/07/28 06:38 |
3924579214c2 `nginx` config: Remove `worker_processes` and `events.worker_connections`. |
|
92476829 |
|
| 2023/07/27 17:25 |
a3ae02eee34c Merge pull request #8990 from sitano:ivan_ptrace_eperm_guide |
|
92476829 |
|
| 2023/07/27 12:44 |
9926c0f464b0 gVisor `fio` benchmarks: Use `libaio` where it makes sense. |
|
92476829 |
|
| 2023/07/26 22:01 |
9926c0f464b0 gVisor `fio` benchmarks: Use `libaio` where it makes sense. |
|
41fe1bae |
|
| 2023/07/26 09:59 |
9926c0f464b0 gVisor `fio` benchmarks: Use `libaio` where it makes sense. |
|
2a509c27 |
|
| 2023/07/25 08:11 |
9926c0f464b0 gVisor `fio` benchmarks: Use `libaio` where it makes sense. |
|
3b91ad04 |
|
| 2023/07/25 08:00 |
9926c0f464b0 gVisor `fio` benchmarks: Use `libaio` where it makes sense. |
|
9a0ddda3 |
|
| 2023/07/24 18:38 |
0ef88bbbd847 Fix fio "regex"s in buildkite file. |
|
9a0ddda3 |
|
| 2023/07/24 17:49 |
0ef88bbbd847 Fix fio "regex"s in buildkite file. |
|
68162649 |
|
| 2023/07/24 06:34 |
19e04218b981 Add methods for generating PCI sysfs paths and registering accel devices. |
|
68162649 |
|
| 2023/07/21 23:12 |
19e04218b981 Add methods for generating PCI sysfs paths and registering accel devices. |
|
27cbe77f |
|
| 2023/07/21 10:48 |
41ec0d4189e3 Add nvproxy support for V100 Nvidia GPUs. |
|
e2c3b400 |
|
| 2023/07/21 09:32 |
41ec0d4189e3 Add nvproxy support for V100 Nvidia GPUs. |
|
28847498 |
|
| 2023/07/20 20:14 |
5eb44a94317f Add config flags and sandbox chroot configuration for TPU proxying. |
|
28847498 |
|
| 2023/07/20 07:54 |
0244c8c19fb7 Add `O_DIRECT` version of `fio` benchmarks to track direct I/O performance. |
|
d922ca7e |
|
| 2023/07/20 06:16 |
0244c8c19fb7 Add `O_DIRECT` version of `fio` benchmarks to track direct I/O performance. |
|
4547cdf9 |
|
| 2023/07/19 17:01 |
ea7cd7184192 Allow walking on FIFO and UDS in lisafs. |
|
4547cdf9 |
|
| 2023/07/19 14:00 |
ea7cd7184192 Allow walking on FIFO and UDS in lisafs. |
|
022df2bb |
|
| 2023/07/19 00:46 |
a87aa736985d Increment/decrement memory accounted per cgroup. |
|
022df2bb |
|
| 2023/07/18 12:28 |
14df01fae680 Update host redirect handling for gvisor.dev |
|
13995e76 |
|
| 2023/07/18 10:22 |
14df01fae680 Update host redirect handling for gvisor.dev |
|
20f8b3c2 |
|
| 2023/07/17 21:16 |
150831fad9ac kernfs: Don't try to cache anonymous inodes. |
|
20f8b3c2 |
|
| 2023/07/17 19:40 |
150831fad9ac kernfs: Don't try to cache anonymous inodes. |
|
e5f10889 |
|
| 2023/07/17 09:15 |
c7a7e6b605a3 Deflake tcp test TestMaxRTO |
|
e5f10889 |
|
| 2023/07/15 06:52 |
c7a7e6b605a3 Deflake tcp test TestMaxRTO |
|
35d9ecc5 |
|
| 2023/07/14 17:38 |
0d52b50f83c2 Use write(2) host syscall to perform writes on disk-backed MemoryFiles. |
|
35d9ecc5 |
|
| 2023/07/14 05:42 |
501a9aaf495c Systrap is now the default gVisor platform. Update platform documentation. |
|
d624500f |
|
| 2023/07/14 00:55 |
e7c1bc6bafbf Merge pull request #7356 from turekt:pollrdhup-fix |
|
d624500f |
|
| 2023/07/13 19:26 |
e7c1bc6bafbf Merge pull request #7356 from turekt:pollrdhup-fix |
|
55eda22f |
|
| 2023/07/13 08:44 |
dd3a7a1fb966 Simply pgalloc.MemoryFile.Allocate() API. |
|
bfb20202 |
|
| 2023/07/13 08:40 |
dd3a7a1fb966 Simply pgalloc.MemoryFile.Allocate() API. |
|
86081196 |
|
| 2023/07/12 19:32 |
d0e7a2240e7c Add support for A10G Nvidia GPUs. |
|
86081196 |
|
| 2023/07/12 16:37 |
f9219588c685 Also run Go garbage collection as part of `Usage.Reduce`. |
|
86081196 |
|
| 2023/07/12 12:53 |
f9219588c685 Also run Go garbage collection as part of `Usage.Reduce`. |
|
979d5fe2 |
|
| 2023/07/12 05:19 |
f9219588c685 Also run Go garbage collection as part of `Usage.Reduce`. |
|
2f19aa4f |
|
| 2023/07/11 16:11 |
f8c4846f214d Pass memory cgroup id in pgalloc.Allocate() |
|
2f19aa4f |
|
| 2023/07/11 10:55 |
f8c4846f214d Pass memory cgroup id in pgalloc.Allocate() |
|
50356e13 |
|
| 2023/07/10 22:38 |
1c287f3c6826 Test to check setting IPV6_V6ONLY on datagram socket with IPV4 address fails. |
|
52ae002a |
|
| 2023/07/10 20:33 |
1c287f3c6826 Test to check setting IPV6_V6ONLY on datagram socket with IPV4 address fails. |
|
0fbf9f05 |
|
| 2023/07/10 10:35 |
a76207d81ba9 Set NA router flag if forwarding is enabled. |
|
0fbf9f05 |
|
| 2023/07/07 23:50 |
a76207d81ba9 Set NA router flag if forwarding is enabled. |
|
668cb1fa |
|