Parth SarthiandgVisor bot 2000f9cdfe Nftables: Support xt_MASQUERADE compatibility target. ...

Added:
- `xt_MASQUERADE` target extension.
    Masq can dynamically rewrites the packet's source IP
    to match the outgoing interface's primary IP.
- Masq Revision 0 ABI.
- Unit and syscall tests.

Ref: net/netfilter/xt_masquerade.c
PiperOrigin-RevId: 965062213

2026-08-14 22:38:12 -07:00

..

abi

Merge pull request #14008 from luiscape:luis/map-fixed

2026-08-14 15:23:54 -07:00

aio

Fix S1004 violations and drop suppression

2026-02-10 11:56:11 -08:00

atomicbitops

…

binary

…

bitmap

Add initial cgroup2 support.

2026-07-06 15:17:54 -07:00

bits

bits: use normal Go generics

2026-01-13 05:34:06 -05:00

bpf

nogo: Fix more analyzer findings.

2026-02-25 11:07:15 -08:00

buffer

remove SliceHeader and replace.

2025-12-15 14:42:53 -06:00

cleanup

…

compressio

Automated rollback of changelist 879883699

2026-03-16 15:49:19 -07:00

context

Add WithValues to context package and use it in restore.go

2026-05-13 09:09:18 -07:00

control

Reset control server on restore with the new kernel.

2024-06-19 11:51:41 -07:00

coretag

runsc: When mounting a new procfs fails, fall back to recursive bind-mount.

2024-11-01 15:39:28 -07:00

coverage

coverage: call cfile.InitHook from InitCoverageData

2025-11-12 12:49:09 -08:00

cpuid

platform: add SlimVM platform

2026-06-25 10:27:28 +08:00

crypto

…

devutil

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

ebpf

Add stub for the bpf(2) syscall and cgroup eBPF programs.

2026-07-31 15:55:57 -07:00

erofs

fsimpl/erofs: read regular file data from the image FD on FUSE

2026-08-12 21:10:59 +00:00

errors

Fix EINTR leakage by correcting type comparison in ConvertIntr.

2026-05-20 22:02:36 -07:00

eventchannel

…

eventfd

kvm, eventfd: support KVM_IOEVENTFD

2025-05-05 10:42:51 -07:00

fd

Implement filesystem-only checkpointing.

2026-03-18 19:44:48 -07:00

fdchannel

all: remove use io/ioutil deprecated package & fix some deprecated thing

2024-10-10 20:36:24 +09:00

fdnotifier

Suspend fdnotifier during save/restore.

2026-01-14 21:00:40 -08:00

flipcall

remove SliceHeader and replace.

2025-12-15 14:42:53 -06:00

fspath

Fix QF1006 violations and drop suppression

2026-02-10 11:55:50 -08:00

fsutil

Implement renameat2.

2026-03-17 13:43:32 -07:00

gohacks

all: remove use io/ioutil deprecated package & fix some deprecated thing

2024-10-10 20:36:24 +09:00

goid

Restore template rendering and switch Go internal facts to be rendered.

2026-01-26 12:28:13 -08:00

gomaxprocs

Automated rollback of changelist 840021943

2026-01-14 15:35:25 -08:00

gvisordetect

Add /proc/gvisor/kernel_is_gvisor marker file used to detect gVisor.

2025-04-18 19:16:59 -07:00

hostarch

platform: add SlimVM platform

2026-06-25 10:27:28 +08:00

hostos

tmpfs: support percentage size + update /proc/self/mounts to match Linux format

2026-05-13 12:25:36 -07:00

hostsyscall

Don't return r2 from RawSyscalls.

2024-10-01 10:29:10 -07:00

hosttid

Restore template rendering and switch Go internal facts to be rendered.

2026-01-26 12:28:13 -08:00

ilist

…

linewriter

…

lisafs

Merge pull request #13243 from ibondarenko1:hardening/lisafs-walk-payload-bound

2026-06-23 16:44:58 -07:00

log

Fix runsc log and profile file handling.

2026-03-02 22:59:55 -08:00

marshal

…

memutil

remove SliceHeader and replace.

2025-12-15 14:42:53 -06:00

metric

Add sentry_entry_point metric.

2026-03-13 16:09:48 -07:00

p9

Clean up p9 package.

2025-07-30 13:11:02 -07:00

pool

…

prometheus

Add --final-metrics-log flag to export metric data upon sandbox termination.

2024-10-21 22:09:40 -07:00

rand

…

rawfile

remove SliceHeader and replace.

2025-12-15 14:42:53 -06:00

rdma

Implement the RDMA netlink protocol for device discovery.

2026-08-13 15:04:29 -07:00

refs

Fix more printf findings

2026-03-18 14:58:54 -07:00

ring0

Merge pull request #13648 from milantracy:typo

2026-07-08 11:41:43 -07:00

ringdeque

Add //pkg/ringdeque.

2024-09-25 20:16:45 -07:00

safecopy

Add BSD-style license to list of licenses

2025-08-06 18:46:54 -07:00

safemem

Fix S1030 violations and drop suppression

2026-02-10 11:56:15 -08:00

seccheck/scsdk

Document ProcessTracker in the scsdk README.

2026-08-14 15:30:33 -07:00

seccomp

runsc boot: Add startup timer instrumentation.

2026-08-07 10:26:34 -07:00

secio

all: remove use io/ioutil deprecated package & fix some deprecated thing

2024-10-10 20:36:24 +09:00

segment

Fix S1016 violations and drop suppression

2026-02-10 11:56:13 -08:00

sentry

Support NVIDIA IMEX-615.62 in gVisor.

2026-08-14 16:01:12 -07:00

shim/v1

Integrate custom TaskService on shim boot if enabled. Add integration tests.

2026-08-05 15:53:20 -07:00

sigframe

platform/kvm: use per-thread signal stack to run bluepill handler

2024-10-11 16:40:39 -07:00

sighandling

Allow Sentry to kill itself even when it is the init process

2025-03-04 11:25:32 -08:00

sleep

Fix S1012 violations and drop suppression

2026-02-10 11:56:13 -08:00

spinlock

Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr

2026-06-30 19:07:10 -07:00

state

Fix some typos in gVisor repo.

2026-07-08 01:53:55 +00:00

sync

Internal change.

2026-04-11 04:49:38 -07:00

syncevent

…

syserr

Updated nftables package to return syserr.Error (POSIX) errors

2025-06-26 13:21:37 -07:00

tcpip

Nftables: Support xt_MASQUERADE compatibility target.

2026-08-14 22:38:12 -07:00

test

docker_image_test: Add logs to help debug the failure.

2026-08-13 02:48:37 -07:00

timing

Measure and report the time taken during the sandbox restore process.

2025-05-14 18:50:02 -07:00

trie

…

unet

Fix QF1003 violations and drop suppression

2026-02-10 11:55:50 -08:00

urpc

Refactor to use reflect.TypeFor

2025-08-22 14:27:14 +08:00

usermem

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

waiter

hostinet: support checkpoint/restore

2026-07-20 08:29:43 -07:00

xdp

remove SliceHeader and replace.

2025-12-15 14:42:53 -06:00