Danny Canter
7962dae643
Add capabilities support ( #444 )
...
Closes https://github.com/apple/containerization/issues/442
This adds capabilities support to LinuxContainer via a new surface in
ContainerizationOS + some C wrappers.
2025-12-11 15:07:17 -05:00
GAUTAM RAJU
031cd72e2a
Implement pdeathSignal handling in Runc ( #431 )
...
Add support for parent death signal (pdeathSignal) to ensure child
processes receive a signal when the parent process dies. This addresses
the FIXME comment in Runc.execute().
## Changes
- Add pdeathSignal field to exec_command_attrs C struct
- Implement prctl(PR_SET_PDEATHSIG) in child process handler (Linux
only)
- Expose pdeathSignal through Command.Attrs Swift API
- Wire up pdeathSignal in Runc.execute() to remove FIXME
## Implementation Details
The implementation uses Linux-specific prctl() to set the parent death
signal, ensuring proper cleanup when parent processes terminate. The
feature is conditionally compiled for Linux only, maintaining
compatibility with other platforms.
2025-12-01 02:35:09 -08:00
Danny Canter
8a34763e40
Socket: Add fd receiving ( #330 )
...
Via scm_rights. Useful for supporting spawning runc as an OCI runtime as
that's how the pty is passed to the client.
2025-10-14 15:59:56 -07:00
J Logan
995a231348
Removes "all rights reserved" from license header. ( #309 )
2025-10-03 13:27:59 -07:00
Danny Canter
fcd198e968
ContainerizationOS: Speed up fd closes ( #222 )
...
Instead of looping through from minimum fd -> rlimit max, we can
close_range(2) or read /proc/self/fd on Linux, and read /dev/fd on
macOS.
2025-07-22 10:30:10 -04:00
Michael Crosby
5d2d7a1bc3
update license header removing new line ( #99 )
...
Fixes #63
Signed-off-by: crosbymichael <michael_crosby@apple.com >
2025-06-12 09:57:35 -04:00
Danny Canter
f49f668936
Updates to license headers ( #17 )
...
- Capitalize containerization.
- Wrap "All rights reserved" to a new line.
Signed-off-by: Danny Canter <danny_canter@apple.com >
2025-06-05 16:16:22 -07:00
+6
3407cc3f16
initial commit
...
Co-authored-by: Aditya Ramani <a_ramani@apple.com >
Co-authored-by: Agam Dua <agam_dua@apple.com >
Co-authored-by: Danny Canter <danny_canter@apple.com >
Co-authored-by: Dmitry Kovba <dkovba@apple.com >
Co-authored-by: Eric Ernst <eric_ernst@apple.com >
Co-authored-by: Evan Hazlett <ehazlett@apple.com >
Co-authored-by: Gilbert Song <gilbertsong@apple.com >
Co-authored-by: Hugh Bussell <hbussell@apple.com >
Co-authored-by: John Logan <john_logan@apple.com >
Co-authored-by: Kathryn Baldauf <k_baldauf@apple.com >
Co-authored-by: Madhu Venugopal <mvenugopal@apple.com >
Co-authored-by: Michael Crosby <michael_crosby@apple.com >
Co-authored-by: Sidhartha Mani <sidhartha_mani@apple.com >
Co-authored-by: Tanweer Noor <tnoor@apple.com >
Co-authored-by: Ximena Perez Diaz <xperez528@gmail.com >
Co-authored-by: Yibo Zhuang <yzhuang@apple.com >
2025-06-05 16:15:21 -07:00
Danny Canter