go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
436 Commits 2 Branches 96 Tags 81 MiB
Commit Graph

2 Commits

Author SHA1 Message Date
Kevin Krakauer a4529c1b5b runsc: Fix readonly filesystem causing failure to create containers. 
For readonly filesystems specified via relative path, we were forgetting to
mount relative to the container's bundle directory.

PiperOrigin-RevId: 210483388
Change-Id: I84809fce4b1f2056d0e225547cb611add5f74177
 2018-08-27 20:34:27 -07:00
Fabricio Voznika db81c0b02f Put fsgofer inside chroot 
Now each container gets its own dedicated gofer that is chroot'd to the
rootfs path. This is done to add an extra layer of security in case the
gofer gets compromised.

PiperOrigin-RevId: 210396476
Change-Id: Iba21360a59dfe90875d61000db103f8609157ca0
 2018-08-27 11:10:14 -07:00