git.openwrt.org Git - project/procd.git/search

2020-10-28	Daniel Golle	jail: add support for absolute root path in OCI spec Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-28	Daniel Golle	jail: relax seccomp unknown syscall handling Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-28	Daniel Golle	jail: handle mount propagation flags Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-28	Daniel Golle	jail: add option for pidfile Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-28	Daniel Golle	jail: guard boolean blobmsg attributes Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-23	Daniel Golle	ujail: elf: work around GCC bug on MIPS64 Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-22	Daniel Golle	jail: mount more stuff read-only Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-21	Daniel Golle	jail: capabilities: apply in two phases Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-19	Daniel Golle	jail: nuke old capabilities code in favour of reusing... Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-19	Daniel Golle	instance: actually wire up capabilities filename Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-19	Daniel Golle	jail: adapt to new ubus socket path Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-10-19	Daniel Golle	early: run ubusd non-root as user ubus, group ubus Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-13	Daniel Golle	cgroups: memory controller fixes Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-13	Daniel Golle	cgroups: restrict allowed keys in 'unified' section Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-10	Thomas Petazzoni	initd/init: add minimal SELinux policy loading support	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	jail: fix freeing cgroups avl Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	jail: only free cgroups if they were allocated Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	jail: parse OCI cgroups resources Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	instance: add instances into unified cgroup hierarchy Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	jail: make use of BLOBMSG_CAST_INT64 for OCI rlimits Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	jail: use pidns semantics also for timens Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-08-06	Daniel Golle	initd: attempt to mount cgroup2 Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-30	Daniel Golle	service: add method to query available container features Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-30	Daniel Golle	uxc: remove debugging left-over Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-30	Daniel Golle	instance: make sure values are not inherited from previous... Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-29	Daniel Golle	uxc: use new container.%s kill ubus API Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-29	Daniel Golle	jail: add 'kill' method to container.%s object Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-29	Daniel Golle	uxc: fix create operation Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-28	Daniel Golle	uxc: behave more like a compliant OCI run-time Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-28	Daniel Golle	jail: add some remaining OCI features Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-25	Daniel Golle	jail: serialize hook execution Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-25	Daniel Golle	jail: fix build on glibc and uclibc Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-21	Daniel Golle	jail: add support for referencing existing namespaces Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-20	Rosen Penev	jail: fix wrong format for 32-bit	commit \| commitdiff \| tree
2020-07-20	Rosen Penev	rcS: cast format string to int64_t	commit \| commitdiff \| tree
2020-07-20	Daniel Golle	jail: re-implement /proc/sys/net read-write in netns... Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-20	Daniel Golle	jail: refactor default mounts into new structure Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-20	Daniel Golle	jail: actually apply filesystem-specific mount options Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-20	Daniel Golle	jail: add support for defining devices Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-20	Daniel Golle	jail: move /tmp/resolv.conf.d to /dev/resolv.conf.d Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-19	Daniel Golle	jail: /proc/$pid/oom_score_adj to OCI defined oomScoreAdj Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-19	Daniel Golle	jail: parse and apply POSIX rlimits Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-19	Daniel Golle	jail: read and apply umask from OCI if defined Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-19	Daniel Golle	jail: implement OCI user additionalGIDs Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-19	Daniel Golle	jail: parse and apply OCI sysctl values Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-19	Daniel Golle	jail: fix hooks Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-17	Daniel Golle	jail: add support for maskedPaths and readonlyPaths Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-16	Daniel Golle	jail: fix some more mount options Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-15	Daniel Golle	jail: fs: fix build on uClibc-ng Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-15	Daniel Golle	procd: fix compile if procd-ujail is not selected Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: fix false return in case of nofail mount Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Bailey	procd: add service instance watchdog	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	uxc: fix build with uClibc-ng Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	uxc: fix 'stop' command Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: don't make mount source read-only Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: refactor mount support to cover OCI spec Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: memory allocation fixes Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: parse and run OCI hooks Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: actually chdir into OCI defined CWD Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: consider PATH for argv in OCI container Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-13	Daniel Golle	jail: fix segfault with len(uidmap/gidmap) > 1 Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-11	Daniel Golle	jail: use linux/capability.h instead of sys/capability.h Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-11	Daniel Golle	ujail: add dependency on syscall-names-h Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-10	Daniel Golle	jail: fix build on platforms without seccomp support Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-10	Daniel Golle	uxc: add container management CLI tool Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-07-10	Daniel Golle	jail: add support for running OCI bundle Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-05-28	Daniel Golle	jail: handle containers seperately Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-05-28	Daniel Golle	jail: use sane termios settings for console pts Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-05-15	Daniel Golle	jail: add option to provide /dev/console to containers Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-05-15	Leonardo Mörlein	jail: unnamed jails can not have netns (fix segfault)	commit \| commitdiff \| tree
2020-05-15	Leonardo Mörlein	jail: SIGSEGV must not be forwarded to the child process	commit \| commitdiff \| tree
2020-04-25	Daniel Golle	jail: don't load libpreload-seccomp.so if it doesn... Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-25	Daniel Golle	jail: don't fail unless requirejail is set Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-19	Daniel Golle	jail: include /etc/nsswitch.conf in jail for glibc. Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-14	Daniel Golle	jail: always mount /dev as additional tmpfs Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-13	Daniel Golle	jail: replace /etc/resolv.conf with symlink in extroot... Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-13	Daniel Golle	jail: mount /sys read-only Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-13	Daniel Golle	jail: make /proc more secure Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-12	Daniel Golle	instance: harmonize instance API Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-12	Daniel Golle	jail: only mess with rootfs if CLONE_NEWNS was set Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-09	Daniel Golle	jail: add support for (ram-)overlayfs Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-09	Daniel Golle	jail: add support for userns and cgroupsns Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-04-09	Daniel Golle	jail: add support for launching extroot containers Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-03-12	Daniel Golle	jail: mount-bind /etc/resolv.conf for non-netns jails Signed-off-by: Daniel Golle <daniel@makrotoia.org>	commit \| commitdiff \| tree
2020-01-21	Daniel Golle	jail: more strict mount options for /tmp/resolv.conf.d/ Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-01-21	Daniel Golle	jail: create resolv.conf symlink for netns jails Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-01-21	Daniel Golle	jail: add basic support for network namespaces Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-01-19	Daniel Golle	instance: Fix instance_config_move_strdup() function Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2020-01-18	Petr Štetiar	instance: fix pidfile and seccomp attributes double... Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2019-12-30	Daniel Golle	jail: remove accidentally added lines Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2019-12-30	Daniel Golle	jail: set user and group inside jail Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2019-05-29	Paul Spooren	procd: add docker support	commit \| commitdiff \| tree
2019-04-26	Paul Spooren	procd: add SIGPWR as signal	commit \| commitdiff \| tree
2019-03-11	Wojciech Dubowik	procd: trace: Define syscall registers for powerpc...	commit \| commitdiff \| tree
2017-06-18	Daniel Golle	system: introduce new attribute board_name Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree
2017-06-08	Daniel Golle	system: return legacy board name Signed-off-by: Daniel Golle <daniel@makrotopia.org>	commit \| commitdiff \| tree

OpenWrt service / process manager

RSS Atom