Shishir
e2430d9373
Merge pull request #118 from Roblox/security_fixes
...
Security fixes.
2021-12-09 12:47:46 -08:00
Shishir
38d7d98b17
Merge branch 'master' into security_fixes
2021-12-09 12:37:02 -08:00
Shishir Mahajan
6fb781b3e5
Security fixes.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-12-09 12:30:05 -08:00
Shishir
436c21e2d3
Merge pull request #117 from sha7khan/master
...
Enable all devices in privileged mode
2021-12-06 11:40:04 -08:00
sha7khan
b5840de352
set expected_capabilities=40 when running GHA
2021-12-05 08:58:02 +05:30
sha7khan
ae3c77d578
Enable oci.WithNewPrivileges in privileged mode
2021-12-05 08:53:20 +05:30
sha7khan
32a46614eb
Enable all devices in privileged mode
...
The Privileged mode in containerd driver is not adding devices from host device.
This change will make the driver's privileged mode equivalent to ctr tool's privileged mode - https://github.com/containerd/containerd/blob/main/cmd/ctr/commands/run/run_unix.go#L205-L207
2021-11-23 10:43:40 +05:30
Shishir
bbb554b18f
Merge pull request #115 from Roblox/security_fix
...
Security fix: Upgrade consul to 1.10.2.
2021-10-05 13:54:31 -07:00
Shishir Mahajan
5678bbf4d3
Security fix: Upgrade consul to 1.10.2.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-10-05 13:33:57 -07:00
Shishir
6c61379334
Merge pull request #114 from Roblox/fix_security_issue
...
Security fix: Upgrade consul to 1.10.1.
2021-10-05 12:11:07 -07:00
Shishir Mahajan
1925e4f4eb
Security fix: Upgrade consul to 1.10.1.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-10-05 11:46:06 -07:00
Shishir
ba229ecdf7
Merge pull request #113 from Roblox/fix_security_issue
...
Security fix: Upgrade containerd to 1.5.7.
2021-10-05 11:17:52 -07:00
Shishir Mahajan
1557ffea14
Security fix: Upgrade containerd to 1.5.7.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-10-05 10:32:07 -07:00
Shishir
4b2fbc7f8b
Merge pull request #112 from Roblox/bump_version
...
Bump version to 0.9.2.
v0.9.2
2021-09-13 15:03:29 -07:00
Shishir Mahajan
514ce5807d
Bump version to 0.9.2.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-09-13 14:53:56 -07:00
Shishir
1f261575d6
Merge pull request #111 from Roblox/security_fix
...
Fix CVE-2021-37218.
2021-09-13 14:23:51 -07:00
Shishir Mahajan
27db80dbe8
Fix CVE-2021-37218.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-09-13 14:08:12 -07:00
Shishir
5168f15971
Merge pull request #110 from Roblox/stdout_stderr_issue
...
Fix: Stderr and stdout of existing processes are lost after a restart of nomad
2021-09-13 14:07:00 -07:00
Shishir Mahajan
7f50f0f598
Fix stdout/stderr pipes issue.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-09-13 11:06:30 -07:00
Shishir
42df527d1f
Merge pull request #109 from Roblox/version_update
...
Update golang, nomad, containerd and nerdctl versions
2021-09-03 10:14:23 -07:00
Shishir Mahajan
42fc67cc80
Update versions, run nomad in non-dev mode and fix tests.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-09-02 16:39:33 -07:00
Shishir
d40a7e36f5
Merge pull request #107 from th0m/tlefebvre/v0.9.1
...
Bump version to 0.9.1.
v0.9.1
2021-08-26 13:17:23 -07:00
Thomas Lefebvre
84aa20f062
Bump version to 0.9.1.
2021-08-26 11:19:03 -07:00
Shishir
1c443d6781
Merge pull request #106 from Roblox/security_fix
...
Upgrade containerd to 1.4.8.
2021-07-26 17:03:14 -07:00
Shishir Mahajan
0ec114bf55
Upgrade containerd to 1.4.8.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-07-26 16:56:12 -07:00
Shishir
fed7fbd9dc
Merge pull request #104 from Roblox/jamesalbert-patch-1
...
image size adjustments
2021-07-16 16:06:24 -07:00
James Albert
117ec3b590
image size adjustments
2021-07-16 15:58:02 -07:00
Shishir
6e150355dd
Merge pull request #102 from Roblox/nerdctl
...
Add nerdctl to vagrant VM.
2021-07-13 16:22:58 -07:00
Shishir Mahajan
496e2d3052
Add nerdctl to vagrant VM.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-07-13 15:59:52 -07:00
Shishir
18db88651b
Merge pull request #101 from th0m/tlefebvre/add-terminal-resizing-support
...
Add support for terminal resizing in alloc exec
2021-07-12 12:09:03 -07:00
Thomas Lefebvre
24a7108c5d
Add support for terminal resizing in alloc exec
2021-07-09 17:12:20 -07:00
Shishir
3ae086ede6
Merge pull request #100 from Roblox/bump_version
...
Bump version to 0.9.
v0.9
2021-07-09 11:15:09 -07:00
Shishir Mahajan
ff9a7210f4
Bump version to 0.9.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-07-09 11:07:18 -07:00
Shishir
af0a604298
Merge pull request #99 from Roblox/shm_size
...
Add support for shm_size.
2021-06-30 12:33:26 -07:00
Shishir Mahajan
10a29eb6e4
Add support for shm_size.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-06-29 16:15:41 -07:00
Shishir
1f9cf42ec6
Merge pull request #96 from Roblox/codeql-patch
...
Add CodeQL scanning
2021-06-29 14:01:35 -07:00
Charles Z
358adb11e0
Create codeql-analysis.yml
...
Add CodeQL for Golang
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-06-29 13:53:27 -07:00
Charles Z
add5a7d4d6
Merge pull request #97 from Roblox/pid_mode
...
Add pid_mode to enable host pid namespace.
2021-06-29 13:43:46 -07:00
Shishir Mahajan
c2ee37323d
Add pid_mode to enable host pid namespace.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-06-29 13:30:42 -07:00
Shishir
14ccf66295
Merge pull request #95 from Roblox/auth
...
Docker registry auth support via driver config.
2021-06-28 14:55:33 -07:00
Shishir Mahajan
65bdeec138
Docker registry auth support via driver config.
...
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
2021-06-22 16:17:58 -07:00
Shishir
6f20bcf872
Merge pull request #91 from Roblox/test-memory-oversubscription
...
Add test for memory oversubscription.
2021-05-20 09:05:45 -07:00
Shishir Mahajan
4f47dcedd5
Add test for memory oversubscription.
...
Co-authored-by: Mahmood Ali <mahmood@hashicorp.com>
2021-05-19 12:33:00 -07:00
Shishir
5945e435f1
Merge pull request #90 from notnoop/f-memory-oversubscription
...
Support Memory Oversubscription
2021-05-19 12:29:32 -07:00
Mahmood Ali
c5dd9b6714
update Vagrant to use Nomad 1.1.0
2021-05-19 13:18:52 -04:00
Mahmood Ali
4549f984a0
Support Nomad memory oversubscription
...
Nomad 1.1.0 introduced Memory Oversubscription: Now, the
NomadResources.Memory struct contains a `MemoryMaxMB` which, if set,
specifies a hard limit on the task. The `MemoryMB` in such case is to be
interpreted as a soft limit.
2021-05-19 13:18:52 -04:00
Mahmood Ali
763249f7ef
Update Nomad dependency
2021-05-18 14:11:36 -04:00
Shishir
a210ba6d34
Merge pull request #89 from lisongmin/add-registry-authentication
...
Add registry authentication
2021-05-08 19:11:48 -07:00
lisongmin
b0bfb21268
add registry authentication
2021-05-09 09:04:22 +08:00
Shishir
c9b0383859
Merge pull request #88 from lisongmin/fix-can-not-running-test-in-vagrant
...
Ability to running test via vagrant-libvirt and fix can not run test via 'sudo make test'
2021-05-02 13:39:48 -07:00