issues
search
shoenig
/
nomad-pledge-driver
Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney
Mozilla Public License 2.0
22
stars
2
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
build(deps): bump golang.org/x/sys from 0.15.0 to 0.18.0
#88
dependabot[bot]
opened
6 months ago
0
build(deps): bump github.com/shoenig/test from 1.7.0 to 1.7.2
#87
dependabot[bot]
opened
6 months ago
0
build(deps): bump github.com/hashicorp/nomad from 1.7.2 to 1.7.6
#86
dependabot[bot]
opened
6 months ago
0
build(deps): bump github.com/hashicorp/nomad from 1.7.2 to 1.7.5
#85
dependabot[bot]
closed
6 months ago
1
build(deps): bump github.com/shoenig/test from 1.7.0 to 1.7.1
#84
dependabot[bot]
closed
6 months ago
1
build(deps): bump golang.org/x/sys from 0.15.0 to 0.17.0
#83
dependabot[bot]
closed
6 months ago
1
build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
#82
dependabot[bot]
closed
7 months ago
1
build(deps): bump github.com/hashicorp/nomad from 1.7.2 to 1.7.3
#81
dependabot[bot]
closed
7 months ago
1
build(deps): bump github.com/hashicorp/go-hclog from 1.5.0 to 1.6.2
#80
dependabot[bot]
closed
9 months ago
0
build(deps): bump github.com/hashicorp/nomad from 1.6.3 to 1.7.2
#79
dependabot[bot]
closed
9 months ago
0
build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0
#78
dependabot[bot]
closed
10 months ago
0
deps: update dependencies for v0.3.0
#77
shoenig
closed
11 months ago
0
plugin: work with nomad 1.7
#76
shoenig
closed
11 months ago
0
repo: add community files
#75
shoenig
closed
11 months ago
0
handle new cgroup layout for nomad 1.7
#74
shoenig
closed
11 months ago
1
bubble error message when cgroup descriptor cannot be read
#73
shoenig
opened
11 months ago
0
build(deps): bump golang.org/x/sys from 0.9.0 to 0.12.0
#72
dependabot[bot]
closed
11 months ago
2
build(deps): bump github.com/hashicorp/nomad from 1.5.6 to 1.6.2
#71
dependabot[bot]
closed
11 months ago
1
build(deps): bump github.com/hashicorp/go-set from 0.1.13 to 0.1.14
#70
dependabot[bot]
closed
11 months ago
1
build(deps): bump golang.org/x/sys from 0.9.0 to 0.11.0
#69
dependabot[bot]
closed
1 year ago
1
build(deps): bump github.com/shoenig/test from 0.6.6 to 0.6.7
#68
dependabot[bot]
closed
11 months ago
1
build(deps): bump github.com/hashicorp/nomad from 1.5.6 to 1.6.1
#67
dependabot[bot]
closed
1 year ago
1
build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
#66
dependabot[bot]
closed
1 year ago
1
exec: default to current (i.e. root) user if no user set, like raw_exec
#65
shoenig
closed
1 year ago
0
wip: try setting data 0700
#64
shoenig
closed
1 year ago
0
plugin: do not reopen fifos on recover task
#63
shoenig
closed
1 year ago
0
readme: remove experimental block
#62
shoenig
closed
1 year ago
0
plugin: set cpu bandwidth correctly
#61
shoenig
closed
1 year ago
0
set cpu bandwidth
#60
shoenig
closed
1 year ago
0
plugin: correctly set memory resource constriants in cgroup
#59
shoenig
closed
1 year ago
0
bug: need to correctly set memory/memory_max from task resources
#58
shoenig
closed
1 year ago
2
build: fixup executable name in config references
#57
shoenig
closed
1 year ago
0
support for host PID/IPC namespacing
#56
shoenig
opened
1 year ago
0
plugin: use context with timeout when using command in fingerprint
#55
shoenig
closed
1 year ago
0
plugin: check for unshare and nsenter during fingerprint
#54
shoenig
closed
1 year ago
0
hack: tidy up hcl example files
#53
shoenig
closed
1 year ago
0
build: fixup makefile targets
#52
shoenig
closed
1 year ago
0
idea: fingerprint unshare and nsenter paths
#51
shoenig
closed
1 year ago
0
ci: set timeout on ci workflow
#50
shoenig
closed
1 year ago
0
plugin: support for bridge networking, pid/ipc namespacing
#49
shoenig
closed
1 year ago
0
idea: support for network bridge mode via pledge
#48
shoenig
opened
1 year ago
1
e2e: flaky cases when trying to read from logs
#47
shoenig
opened
1 year ago
0
hack: fixup outdated .nomad extensions to .hcl
#46
shoenig
closed
1 year ago
0
build: setup goreleaser
#45
shoenig
closed
1 year ago
0
drviver: restore pledge environment during task recovery
#44
shoenig
closed
1 year ago
0
build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0
#43
dependabot[bot]
closed
1 year ago
0
build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.6
#42
dependabot[bot]
closed
1 year ago
0
build(deps): bump github.com/hashicorp/go-set from 0.1.12 to 0.1.13
#41
dependabot[bot]
closed
1 year ago
0
build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
#40
dependabot[bot]
closed
1 year ago
0
build(deps): bump github.com/hashicorp/nomad from 1.5.3 to 1.5.6
#39
dependabot[bot]
closed
1 year ago
0
Next