Skip to content

1.8.1
Compare
Choose a tag to compare
@giuseppe giuseppe released this 27 Feb 10:50
· 787 commits to main since this release
1.8.1
This tag was signed with the committer’s verified signature.
giuseppe Giuseppe Scrivano
GPG key ID: 67E38F7A8BA21772
Learn about vigilant mode.
f8a096b
This commit was signed with the committer’s verified signature.
giuseppe Giuseppe Scrivano
GPG key ID: 67E38F7A8BA21772
Learn about vigilant mode.
  • linux: idmapped mounts expect the same configuration as the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned to what runc will do as well.
  • krun: always allow /dev/kvm in the cgroup configuration.
  • handlers: disable exec for handlers that do not support it.
  • selinux: allow setting fscontext using a custom annotation.
  • cgroup: reset systemd unit if start fails.
  • cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  • cgroup: always delete the cgroup on errors. On some errors it could have been leaked before.
Assets 18
Loading