summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2021-07-15uxc: check for required blockd mountsDaniel Golle
2021-07-15jail: open() extroot folder before mountingDaniel Golle
2021-07-15jail: allow rootfs to be a symbolic linkDaniel Golle
2021-07-15jail: increase max additional env records to 64Daniel Golle
2021-07-15jail: do not hack /etc/resolv.conf on container rootfsDaniel Golle
2021-07-15uxc: implement support for rootfs overlay in containersDaniel Golle
2021-07-10jail: add support for cgroup devices as in OCI run-time specDaniel Golle
2021-05-05procd: Use /dev/console for serial console if existsGaurav Pathak
2021-03-21procd: Adding support to detect Pantavisor Container PlatformGaurav Pathak
2021-03-19trace: fix build on aarch64Daniel Golle
2021-03-19jail/seccomp: add support for aarch64Daniel Golle
2021-03-07inittab: detect active console from kernel if no console= specifiedMathew McBride
2021-03-07utils: fix C style in header fileDaniel Golle
2021-03-02procd: fix compilation with newer muslRosen Penev
2021-02-23system: expose if system was booted from initramfsDaniel Golle
2021-02-13cosmetics: provide compatible system info on Aarch64Daniel Golle
2021-02-07procd: add hotplug-call dispatcherDaniel Golle
2021-02-02jail: cgroups: fix uninitialized variableDaniel Golle
2021-02-02jail: only output BPF instr. table header if debuggingDaniel Golle
2021-02-02jail: remove duplicate check for hook file permissionsDaniel Golle
2021-01-26procd: fix compiler warningJohn Crispin
2021-01-26hotplug.c: set nl_pid to zeroStefan Eichenberger
2020-12-12treewide: replace local mkdir_p implementationsDaniel Golle
2020-12-09jail: remove unreachable codeDaniel Golle
2020-12-04early: fall-back to run ubus as root if user can't be foundDaniel Golle
2020-12-01jail: improve seccomp log outputDaniel Golle
2020-11-30jail: seccomp: improve code readabilityDaniel Golle
2020-11-30jail: always call cgroups_free()Daniel Golle
2020-11-30jail: improve seccomp BPF generatorDaniel Golle
2020-11-27jail: properly initialize timens_fdDaniel Golle
2020-11-27jail: enter existing cgroups namespace if givenDaniel Golle
2020-11-27jail: don't attempt to mount /sys with noatimeDaniel Golle
2020-11-27jail: fix typo in usage outputDaniel Golle
2020-11-27jail: seteuid before clone(CLONE_NEWUSER)Daniel Golle
2020-11-27jail: don't fail if can't mount-bind /etc/resolv.confDaniel Golle
2020-11-27jail: don't use NULL arguments for mount syscallDaniel Golle
2020-11-27jail: relax /etc/resolv.conf creationDaniel Golle
2020-11-27jail: fix and simplify userns uid/gid maps from OCIDaniel Golle
2020-11-27jail: fix segfault on missing name and refactorDaniel Golle
2020-11-27jail: leak less memoryDaniel Golle
2020-11-22jail: add 'debug' extern variable to preload_seccompDaniel Golle
2020-11-22uxc: also delete procd runtime state on 'delete'Daniel Golle
2020-11-22uxc: fix incomplete commitDaniel Golle
2020-11-21jail: cgroup hack: rewrite cgroup -> cgroup2Daniel Golle
2020-11-21seccomp: silence 'unknown syscall' warningsDaniel Golle
2020-11-21uxc: make force-delete kill container processDaniel Golle
2020-11-17trace: switch to OCI seccomp JSON outputDaniel Golle
2020-11-15seccomp: switch to new OCI compliant parserDaniel Golle
2020-11-15seccomp: specifying architectures is optionalDaniel Golle
2020-11-07jail: fix capabilitiesDaniel Golle