68 Commits

Author SHA1 Message Date
Christian Weichel
fe2a87be1e [workspacekit] Don't sleep for debugging by default 2021-08-04 14:59:04 +02:00
Christian Weichel
4c5bce0484 [workspacekit] Discover bind mount paths 2021-07-22 20:34:26 +02:00
Gero Posmyk-Leinemann
8f0c24af66 [ws-manager, supervisor, bridge] Prebuild workspaces are done when their container stops 2021-07-08 09:27:34 +02:00
Christian Weichel
386abf3015 [test] Support ring1 in ws agent instrumentation 2021-06-25 08:27:37 +02:00
Manuel Alejandro de Brito Fontes
9d4f213d24 Bind mounting /workspace in ring1 only if not running FWB 2021-05-26 13:10:54 +02:00
Manuel Alejandro de Brito Fontes
001fde1661 [ws-daemon] Refactor full workspace backup 2021-05-26 13:10:54 +02:00
Manuel Alejandro de Brito Fontes
04dae3f519 [workspacekit] Refactor lift command 2021-05-18 09:12:33 -04:00
Christian Weichel
c2a2352f12 [supervisor] Add config change analytics 2021-05-06 16:21:40 +02:00
Christian Weichel
5cb54cf6ba [workspacekit] Relax IWS socket wait time 2021-04-22 14:20:12 +02:00
Christian Weichel
73a77ce051 [supervisor] Run as UID/GID 0 2021-04-21 13:24:08 +02:00
Manuel Alejandro de Brito Fontes
9e6635dbd3
[user-namespaces] Support FUSE FS shift (#3384)
[user-namespaces] Support FUSE FS shift
2021-03-25 08:13:30 -03:00
Christian Weichel
934319ad59 [workspacekit] Support command execution in ring1 2021-03-19 17:33:11 +01:00
Manuel Alejandro de Brito Fontes
3b4ebc9bad Migrate deprecated methods from ioutil package 2021-03-02 06:37:49 -03:00
Manuel Alejandro de Brito Fontes
2b6a56bc40 Update go imports 2021-03-02 06:37:49 -03:00
Christian Weichel
1046faf0f9 [registry-facade] Remove feature flag
and enable registry-facade by default.
2021-02-18 09:25:56 +01:00
Christian Weichel
7cc8e52725 [ws-daemon] Support proc mounts using open_tree/move_mount 2021-01-29 17:46:53 +01:00
Christian Weichel
7712280777 [workspacekit] Support mount proc in a workspace using seccomp-notify 2021-01-29 17:46:53 +01:00
Christian Weichel
e641afad2b [workspacekit] Move all user namespace setup stuff to its own component
To keep supervisor free from CGO e.g. libcap or libseccomp
2021-01-29 17:46:53 +01:00