opencontainers / runc

CLI tool for spawning and running containers according to the OCI specification

https://www.opencontainers.org/

opencontainers/runc Issues

rlimit hack won't work with Go 1.23
Updated 17 days ago
When runc updates the values of cpu-rt-period and cpu-rt-runtime synchronously, an error occurs.
Closed 18 days ago
runc error on pod termination
Closed 18 days ago3
flaky test: TestCheckpoint(actuated-arm64-6cpu-8gb, 1.21.x)
Closed 19 days ago2
racy RLIMIT_NOFILE setting with Go 1.19+
Closed a month ago13
flaky test: TestUsernsCheckpoint
Updated a month ago
GHSA-c5pj-mqfh-rvc3 "Runc allows an arbitrary systemd property to be injected" is a misunderstood vulnerability. Users do NOT need to update runc.
Closed a month ago3
runc update will clear cpu burst value
Closed 2 months ago3
Blockers for v1.2.0
Updated 2 months ago8
Tests broken in debian due to PR: rootfs: remove --no-mount-fallback and finally fix MS_REMOUNT
Closed 2 months ago15
`--manage-cgroups-mode` can not be `ignore` when checkpoint and restore containers
Updated 2 months ago5
runc doesn't work with go1.22
Updated 2 months ago1
runc init hang up
Closed 3 months ago1
runc update: cpu period and cpu burst being reset to defaults after an unrelated update
Updated 3 months ago8
flaky test: kill KILL [host pidns]
Closed 3 months ago8
runc-dmz: Inheritable capabilities are dropped when they previously weren't
Closed 3 months ago16
Seems like a typo, the .PHONY label has no purpose this way
Closed 4 months ago3
vagrant up is not working in Cirrus CI
Closed 4 months ago4
Kubelet fails to invoke runc to delete residual cgroup resources in pods.
Closed 4 months ago4
[ci] We should check `memory.swap.max` exists or not for cgroupv2
Updated 4 months ago1
writing sync procError: write sync: file already closed
Closed 4 months ago
BPF programs installed by libcontainer are not distinguished
Updated 4 months ago
runc-dmz masks the error from unix.SYS_EXECVEAT
Closed 5 months ago12
[Alpine] docker top, runc ps fail with cgroup2 with: unable to get all container pids
Updated 5 months ago7
Building runc 1.1.11 causes
Closed 5 months ago
flaky test: check_cpu_*
Closed 5 months ago1
Reasons that can't use runc-dmz
Updated 5 months ago
runc can not wait process in the container exits when share pid namespace
Updated 6 months ago4
(u|g)idMappings should not exist when joining an existing user ns
Closed 6 months ago9
containerd/crio passes invalid config.json
Closed 6 months ago2
FileLog Pipeline Not Closed, Causing runc exec to Hang
Updated 6 months ago2
Some namespace path joining errors together with user ns
Updated 6 months ago3
How to deal with the Configuration Conflict for user ns
Closed 6 months ago1
flaky test: TestProcessEmptyCaps
Updated 6 months ago
HostPID Pod Container Cgroup path was residual after container restarts
Closed 6 months ago16
regression: can't kill and delete the container with shared(host) pid ns when the init process has dead
Closed 6 months ago1
runc pod respawn will destroy Qemu processes (with pid 1)
Updated 6 months ago3
cgroup v2 root stats should not be calculated as v1
Updated 7 months ago3
libcontainer cannot be build due to runc-dmz (as a Go library for third party projects) : `dmz_linux.go:21:12: pattern runc-dmz: no matching files found`
Closed 7 months ago5
RFC: treat host pidns container with no init process as running if some processes exist in cgroup
Closed 7 months ago4
runc-dmz does not play well with selinux
Closed 7 months ago19
container create failed (`lstat /proc/63538/ns/ipc: no such file or directory`)
Closed 7 months ago1
semi-arbitrary cgroup resource write with malicious hugetlb configuration
Closed 7 months ago1
`runc run [timens with no offsets]` is flaky on ubuntu
Updated 7 months ago3
Mirror site of criu is broken
Closed 7 months ago1
docker exec can't get detail messages if runc init exited abnormally
Updated 7 months ago4
GHA CI broken
Closed 8 months ago1
Support compiling on MIPS
Closed 8 months ago2
feature: crun-like systemd cgroup driver mode
Updated 8 months ago
contrib: AppArmor profile (and docs) for kernel.apparmor_restrict_unprivileged_userns
Updated 8 months ago1