Śruba, przykręcona we śnie, nie zmieni sytuacji, jaka panuje na jawie.
Added
Support for hugetlb.<pagesize>.rsvd limiting and accounting. Fixes the
issue of postres failing when hugepage limits are set. (#3859, #4077)
Fixed
Fixed permissions of a newly created directories to not depend on the value
of umask in tmpcopyup feature implementation. (#3991, #4060)
libcontainer: cgroup v1 GetStats now ignores missing kmem.limit_in_bytes
(fixes the compatibility with Linux kernel 6.1+). (#4028)
Fix a semi-arbitrary cgroup write bug when given a malicious hugetlb
configuration. This issue is not a security issue because it requires a
malicious config.json, which is outside of our threat model. (#4103)
There is a crack in everything. That's how the light gets in.
Added
Added go 1.21 to the CI matrix; other CI updates. (#3976, #3958)
Fixed
Fixed losing sticky bit on tmpfs (a regression in 1.1.8). (#3952, #3961)
intelrdt: fixed ignoring ClosID on some systems. (#3550, #3978)
Changed
Sum anon and file from memory.stat for cgroupv2 root usage,
as the root does not have memory.current for cgroupv2.
This aligns cgroupv2 root usage more closely with cgroupv1 reporting.
Additionally, report root swap usage as sum of swap and memory usage,
aligned with v1 and existing non-root v2 reporting. (#3933)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github.com/opencontainers/runc from 1.1.8 to 1.1.10.
Changelog
Sourced from github.com/opencontainers/runc's changelog.
Commits
18a0cb0
VERSION: release 1.1.107b469c9
Merge pull request from GHSA-5g49-rx9x-qfc6b426e9b
libct/cgroups.OpenFile: clean "file" argumente1adc7f
Merge pull request #4077 from kolyshkin/1.1-40738214e63
libct/cg: support hugetlb rsvdf8be700
[1.1] tests/int/helpers: add get_cgroup_path5ba0e01
merge #4081 into opencontainers/runc:release-1.11f66027
ci/gha: fix downloading Release.key42acc58
Merge pull request #4060 from kolyshkin/1.1-40565a5b2cc
Fix directory perms vs umask for tmpcopyupDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show