opencontainers/runc

Issues

• Blockers for v1.2.0

  #4114 opened 7 months ago by AkihiroSuda
  12

• runc doesn't work with go1.22

  #4233 opened 2 days ago by cyphar
  6

• [ci] We should check `memory.swap.max` exists or not for cgroupv2

  #4166 opened 3 days ago by lifubang
  1

• `--manage-cgroups-mode` can not be `ignore` when checkpoint and restore containers

  #4178 opened 5 months ago by loheagn
  6

• CI: Replace CentOS Stream 8 with Alma, Rocky, or Oracle Linux due to EOL

  #4302 opened 6 days ago by AkihiroSuda
  5

• flaky test: TestUsernsCheckpoint

  #4273 opened a month ago by lifubang
  6

• Flaky test: TestFdLeaks

  #4297 opened 10 days ago by kolyshkin
  0

• flake in TestInitJoinPID on CentOS 7

  #4294 opened 12 days ago by kolyshkin
  0

• rlimit hack won't work with Go 1.23

  #4287 opened 19 days ago by kolyshkin
  1

• Unblock

  #4289 opened 18 days ago by mnMomma
  0

• When runc updates the values ​​of cpu-rt-period and cpu-rt-runtime synchronously, an error occurs.

  #4094 opened 20 days ago by zhongTao99
  0

• runc error on pod termination

  #4281 opened 20 days ago by Daxcor69
  3

• flaky test: TestCheckpoint(actuated-arm64-6cpu-8gb, 1.21.x)

  #4274 opened 21 days ago by lifubang
  2

• racy RLIMIT_NOFILE setting with Go 1.19+

  #4195 opened a month ago by jrivera-px
  13

• GHSA-c5pj-mqfh-rvc3 "Runc allows an arbitrary systemd property to be injected" is a misunderstood vulnerability. Users do NOT need to update runc.

  #4263 opened a month ago by AkihiroSuda
  3

• runc update will clear cpu burst value

  #4210 opened 2 months ago by lifubang
  3

• Tests broken in debian due to PR: rootfs: remove --no-mount-fallback and finally fix MS_REMOUNT

  #4093 opened 2 months ago by rata
  15

• runc init hang up

  #4228 opened 3 months ago by 113xiaoji
  1

• runc update: cpu period and cpu burst being reset to defaults after an unrelated update

  #4225 opened 3 months ago by lifubang
  8

• flaky test: kill KILL [host pidns]

  #4163 opened 3 months ago by lifubang
  8

• runc-dmz: Inheritable capabilities are dropped when they previously weren't

  #4125 opened 3 months ago by dgl
  16

• Seems like a typo, the .PHONY label has no purpose this way

  #4204 opened 4 months ago by santidhammo
  3

• vagrant up is not working in Cirrus CI

  #4199 opened 4 months ago by kolyshkin
  4

• Kubelet fails to invoke runc to delete residual cgroup resources in pods.

  #4181 opened 4 months ago by bugsorry
  4

• writing sync procError: write sync: file already closed

  #4171 opened 4 months ago by lifubang
  0

• BPF programs installed by libcontainer are not distinguished

  #4180 opened 4 months ago by bobrik
  0

• runc-dmz masks the error from unix.SYS_EXECVEAT

  #4170 opened 5 months ago by lifubang
  12

• [Alpine] docker top, runc ps fail with cgroup2 with: unable to get all container pids

  #4097 opened 8 months ago by kholmanskikh
  7

• Building runc 1.1.11 causes

  #4169 opened 5 months ago by jpalermo
  0

• flaky test: check_cpu_*

  #4165 opened 5 months ago by lifubang
  1

• Reasons that can't use runc-dmz

  #4158 opened 5 months ago by lifubang
  0

• runc can not wait process in the container exits when share pid namespace

  #4145 opened 6 months ago by kamizjw
  4

• (u|g)idMappings should not exist when joining an existing user ns

  #4122 opened 6 months ago by lifubang
  9

• containerd/crio passes invalid config.json

  #4133 opened 6 months ago by cyphar
  2

• FileLog Pipeline Not Closed, Causing runc exec to Hang

  #4141 opened 6 months ago by ruijzhan
  2

• Some namespace path joining errors together with user ns

  #4138 opened 6 months ago by lifubang
  3

• How to deal with the Configuration Conflict for user ns

  #4132 opened 6 months ago by lifubang
  1

• flaky test: TestProcessEmptyCaps

  #4136 opened 6 months ago by cyphar
  0

• runc pod respawn will destroy Qemu processes (with pid 1)

  #4116 opened 7 months ago by senolcolak
  3

• cgroup v2 root stats should not be calculated as v1

  #4059 opened 8 months ago by linxiulei
  3

• libcontainer cannot be build due to runc-dmz (as a Go library for third party projects) : `dmz_linux.go:21:12: pattern runc-dmz: no matching files found`

  #4096 opened 7 months ago by mythi
  5

• runc-dmz does not play well with selinux

  #4057 opened 7 months ago by kolyshkin
  19

• container create failed (`lstat /proc/63538/ns/ipc: no such file or directory`)

  #4111 opened 7 months ago by clcc2019
  1

• semi-arbitrary cgroup resource write with malicious hugetlb configuration

  #4103 opened 7 months ago by cyphar
  1

• `runc run [timens with no offsets]` is flaky on ubuntu

  #4074 opened 8 months ago by kolyshkin
  3

• Mirror site of criu is broken

  #4088 opened 8 months ago by lifubang
  1

• docker exec can't get detail messages if runc init exited abnormally

  #4083 opened 8 months ago by ningmingxiao
  4

• GHA CI broken

  #4078 opened 8 months ago by kolyshkin
  1

• feature: crun-like systemd cgroup driver mode

  #4072 opened 8 months ago by kolyshkin
  0

• contrib: AppArmor profile (and docs) for kernel.apparmor_restrict_unprivileged_userns

  #4069 opened 8 months ago by AkihiroSuda
  1