zeekayandHanzo Dev e1280967b6 Give the last two payloads a wire to state ...

A prometheus Data held its labels in a map, and control.ExecArgs held the
live kernel objects an exec runs against -- a mount namespace, an fd
table, a limit set. Neither has offsets, so neither payload could state
a layout.

Labels become a list, which also retires the O(n^2) walk that existed to
read a map in sorted order. The kernel objects move to control.Env, which
is what the sentry supplies and what a call arriving on the wire cannot:
a namespace is a reference, not a value.

Every urpc payload now states its own wire.


Co-authored-by: Hanzo Dev <[email protected]>

2026-09-22 23:10:33 -07:00

..

alias

Make the bwrap alias a wrapper around the sandboxexec Go bindings.

2026-08-31 01:51:10 +00:00

metricserver

Use //:release BUILD target over //runsc.

2026-09-08 18:53:18 -07:00

nvproxy

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

profile

Add block, goroutine, mutex, and trace subcommands to runsc profile

2026-09-08 12:20:09 -07:00

sandboxsetup

runsc gofer: Remove /proc unmounter and unmount in-process instead

2026-08-14 17:56:58 -07:00

sentry

Defer release of slow-to-release FDs via disabled io_uring ring.

2026-08-20 18:27:54 -07:00

trace

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

util

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

bootposture_test.go

Merge pull request #13929 from EtiennePerot:sentry-binary

2026-08-05 19:00:10 -07:00

BUILD

Defer release of slow-to-release FDs via disabled io_uring ring.

2026-08-20 18:27:54 -07:00

capability_test.go

Merge pull request #13929 from EtiennePerot:sentry-binary

2026-08-05 19:00:10 -07:00

checkpoint.go

Automated rollback of changelist 964380388

2026-08-19 15:37:46 -07:00

cmd.go

runsc/cmd/sandboxsetup: export gofer setup helpers for reuse

2026-04-10 07:14:21 -04:00

cpu_features.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

create.go

Fix: Use updated bundleDir when reading spec

2026-07-01 12:24:42 -07:00

debug.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

delete_test.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

delete.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

do.go

Implement shared "null netns" to avoid netns creation overhead on start

2026-08-03 14:51:43 -07:00

events.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

exec_test.go

Add support for ambient capabilities in runsc.

2026-06-10 13:08:50 -07:00

exec.go

Move sentry (runsc boot) to its own go_binary.

2026-07-31 13:02:53 -07:00

features_test.go

Add "runsc features" command.

2026-05-07 16:36:34 -07:00

features.go

Integrate runsc features command with runsc shim

2026-05-21 11:11:53 -07:00

fscheckpoint.go

Support multi path filesystem checkpoint.

2026-07-29 15:30:33 -07:00

gofer_test.go

runsc/boot: add per-mount directfs opt-out

2026-05-12 06:15:02 -04:00

gofer.go

State the ZAP wire of every urpc payload

2026-09-22 23:10:33 -07:00

install_sidecars.go

Enforce release matching in sidecar binaries.

2026-07-22 16:28:21 -07:00

install_test.go

Enforce release matching in sidecar binaries.

2026-07-22 16:28:21 -07:00

install.go

Enforce sidecar version matching.

2026-08-27 00:50:31 -07:00

kill.go

runsc kill: add support for killing based on pgid

2026-04-09 22:41:33 +00:00

list_test.go

Add option to list only sandboxes

2022-11-17 12:31:07 -08:00

list.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

metric_export.go

Give the last two payloads a wire to state

2026-09-22 23:10:33 -07:00

metric_metadata.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

metric_server.go

runsc: add gvisorbinaries package to mediate embedded sidecar binaries

2026-07-15 19:20:20 -07:00

mitigate_extras.go

Update go branch to Go 1.21.

2023-10-23 22:09:47 -07:00

mitigate_test.go

Refactor subcommands error handling into a separate package

2022-05-06 09:40:39 -07:00

mitigate.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

path.go

Refactor subcommands error handling into a separate package

2022-05-06 09:40:39 -07:00

pause.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

pidfile_test.go

Write pidfile atomically

2025-08-14 02:32:49 +00:00

pidfile.go

Write pidfile atomically

2025-08-14 02:32:49 +00:00

platforms.go

runsc: Fix newline for cmd usage display

2024-12-29 03:49:46 +08:00

portforward.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

ps.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

read_control.go

Support cgroup2 queries from outside the sandbox

2026-07-20 12:24:23 -07:00

read_test.go

Add offset support to runsc read command and Sandbox.ReadFile

2026-08-05 20:37:26 -07:00

read.go

Add offset support to runsc read command and Sandbox.ReadFile

2026-08-05 20:37:26 -07:00

restore.go

Automated rollback of changelist 964380388

2026-08-19 15:37:46 -07:00

resume.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

run.go

Move sentry (runsc boot) to its own go_binary.

2026-07-31 13:02:53 -07:00

sandboxexec_test.go

Sandboxexec: Set Root.Path to 'rootfs' to prevent host filesystem exposure.

2026-06-02 17:12:09 -07:00

sandboxexec.go

Sandboxexec: Set Root.Path to 'rootfs' to prevent host filesystem exposure.

2026-06-02 17:12:09 -07:00

spec_test.go

Add --tpu flag to spec subcommand for automatically adding TPU devices.

2025-12-29 10:03:43 -08:00

spec.go

Add support for ambient capabilities in runsc.

2026-06-10 13:08:50 -07:00

start.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

state.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

statefile.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

symbolize.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

syscalls.go

runsc: Fix newline for cmd usage display

2024-12-29 03:49:46 +08:00

tar.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

update.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

usage.go

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

wait.go

Add runsc wait --fscheckpoint/fsrestore.

2026-03-20 14:44:50 -07:00

write_control.go

Support cgroup2 queries from outside the sandbox

2026-07-20 12:24:23 -07:00