Seth Hoenig 05937ab75b exec2: add client support for unveil filesystem isolation mode (#20115) ...

* exec2: add client support for unveil filesystem isolation mode

This PR adds support for a new filesystem isolation mode, "Unveil". The
mode introduces a "alloc_mounts" directory where tasks have user-owned
directory structure which are bind mounts into the real alloc directory
structure. This enables a task driver to use landlock (and maybe the
real unveil on openbsd one day) to isolate a task to the task owned
directory structure, providing sandboxing.

* actually create alloc-mounts-dir directory

* fix doc strings about alloc mount dir paths

2024-03-13 08:24:17 -05:00

..

cmd

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

docklog

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

test-resources/docker

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

util

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

config_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

config.go

exec2: add client support for unveil filesystem isolation mode (#20115)

2024-03-13 08:24:17 -05:00

coordinator_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

coordinator.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

cpuset_test.go

tests: swap testify for test in more places (#20028)

2024-02-29 12:11:35 -06:00

cpuset.go

client: refactor cpuset partitioning (#18371)

2023-09-12 09:11:11 -05:00

driver_darwin_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_default.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_linux_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_test.go

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

driver_unix_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_windows_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_windows.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver.go

deps: upgrade to go-set/v2 (#18638)

2023-10-05 11:56:17 -05:00

fingerprint_test.go

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

fingerprint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

handle.go

client: refactor cpuset partitioning (#18371)

2023-09-12 09:11:11 -05:00

network_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

network.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

ports_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

ports.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

progress_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

progress.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

reconcile_dangling_test.go

deps: upgrade to go-set/v2 (#18638)

2023-10-05 11:56:17 -05:00

reconcile_dangling.go

deps: upgrade to go-set/v2 (#18638)

2023-10-05 11:56:17 -05:00

state.go

deps: upgrade to go-set/v2 (#18638)

2023-10-05 11:56:17 -05:00

stats_test.go

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

stats.go

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

utils_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

utils_unix_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

utils_windows_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

utils.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

win32_volume_parse.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00