Certain annotations in kata can be used to execute pre-exiting binaries. This could be used to execute arbitrary binaries with the onus of validating these paths left to the stack about Kata. In this release, we added appropriate validations so that an admin can configure a list of file syst...
roman-kiselenko mentioned this issue Jun 25, 2024 Reload config should remove pinned images when an empty list is provided #8213 Merged sohankunkerkar removed the lifecycle/stale label Jun 28, 2024 github-actions bot commented Jul 29, 2024 A friendly reminder that this issue had no a...
The sgx_wamr.edl is under ${WAMR_ROOT}/core/shared/platform/linux-sgx, so please add it to the search path list when generating Enclave_u.c and Enclave_t.c from Enclave.edl: @cd App && $(SGX_EDGER8R) --untrusted ../Enclave/Enclave.edl \ --search-path ../Enclave \ --s...
# See: https://godoc.org/github.com/kata-containers/runtime/virtcontainers#ContainerType sandbox_cgroup_only=false # Enabled experimental feature list, format: ["a", "b"]. # Experimental features are features not stable enough for production, # they may break compatibility, and are prepared ...
PathList []string `toml:"path_list"` HypervisorPathList []string `toml:"path_list"` JailerPath string `toml:"jailer_path"` JailerPathList []string `toml:"jailer_path_list"` Kernel string `toml:"kernel"` @@ -566,6 +566,7 @@ func newFirecrackerHypervisorConfig(h hypervisor) (vc.Hyper...
containers,err:=client.ContainerService().List(namespacedCtx, "runtime.name=="+types.KataRuntimeName+`,labels."io.cri-containerd.kind"==sandbox`) "runtime.name~="+types.KataRuntimeNameRegexp+`,labels."io.cri-containerd.kind"==sandbox`) ...
{{ message }} This repository has been archived by the owner on May 12, 2021. It is now read-only. kata-containers / runtime Public archive Notifications You must be signed in to change notification settings Fork 375 Star 2.1k ...
()interface to time out and fail. However, because the containerd's grpc call has timed out and return, the shim side continues to execute, and successfully creates a container instance and writes it to the shim service container list. Therefore, the containerd data is inconsistent with the ...
annotations: Rename checkPathIsInGlobList with checkPathIsInGlobs … 92ffecf c3d added a commit to c3d/runtime that referenced this issue Oct 9, 2020 annotations: Give better names to local variabes in search functions … a7ac8e4 c3d added a commit to c3d/runtime that referenced th...
Kata Containers version 1.x runtime (for version 2.x see https://github.com/kata-containers/kata-containers). - runtime/protocols/mockserver/mockserver.go at 42438f93864a4be225d376841577da8a5790c7e2 · kata-containers/runtime