Nayana BidariandgVisor bot 3846731234 Refactor network configuration during restore and defer link creation in runsc ...

This change refactors the network configuration flow during sandbox restore
and defers the creation of network links and routes in runsc to run after
seccomp filters are installed.

- Replaced ReplaceConfig with ResetConfig in inet.Stack. Introduced
inet.NetworkArgs to configure the stack during restore, updating k.LoadFrom
to use it.
- Renamed CreateLinksAndRoutes URPC to SetNetworkArgs, which now configures
host sockets before seccomp is installed, deferring link/route creation to run
after seccomp.
- Fixed S/R support by saving and restoring limit/burst state.
- Minor seccomp filter adjustments and test updates.

PiperOrigin-RevId: 945995430

2026-07-10 18:52:31 -07:00

..

packetmmap

Internal change.

2026-03-03 15:12:27 -08:00

BUILD

Remove usages of save-restore-netstack flag.

2026-04-22 10:15:08 -07:00

events.proto

Emit SentryTcpListenEvent when the application listens on a tcp port.

2023-09-05 19:15:45 -07:00

netstack_state.go

Remove usages of save-restore-netstack flag.

2026-04-22 10:15:08 -07:00

netstack.go

Support the SO_MARK socket option and Netfilter mark matching.

2026-06-25 12:16:10 -07:00

provider.go

Cleanup creds-related funcs and change CapError behavior

2026-01-08 17:23:58 -08:00

socketopt_custom.go

Return ENOPROTOOPT from setsockopt syscalls as default.

2025-04-16 16:22:52 -07:00

stack_test.go

Fix nil pointer dereference in netstack.Stack.

2026-03-11 14:59:32 -07:00

stack.go

Refactor network configuration during restore and defer link creation in runsc

2026-07-10 18:52:31 -07:00

tun.go

netstack/tuntap: implement the IFF_TUN_EXCL flag

2025-05-07 11:59:29 -07:00