All pull requests

Pull requests

• gofer: Validate the type of files reopened during restore

  #16131·xinzhong opened Oct 21, 2026Contributor·

  ·

• Restrict /proc/gvisor/spec_environ to the container's user

  ready to pull
  #16130·ayushr2 opened Oct 21, 2026Collaborator·

  ·
  1

  1

• Update syscall BUILD file to enable save-restore on arch_prctl

  exported
  #16129·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• nvproxy: support /dev/nvidia-uvm-tools

  exported
  #16128·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• Update syscall BUILD file to enable save-restore on arch_prctl

  ready to pull
  #16126·kerumeto opened Oct 21, 2026Contributor·

  ·

• Make shim event publish failures non-fatal, as in the runc shim.

  exported
  #16124·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• Update checklocks for signalfd and adjacent files.

  exported
  #16121·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• overlay: Copy file data for copy-up without holding renameMu

  #16117·wikipika-modal opened Oct 21, 2026·

  ·

• Internal change.

  exported
  #16116·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• buildkite coordinator: implement job timeouts + rate-limiting

  exported
  #16114·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• Allowlist TPU7x Application VF PCI device ID (0x0076) in runsc chroot setup.

  exported
  #16113·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• pgalloc: make MemoryFile.savable atomic

  exported
  #16108·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• mm: don't write back buffered I/O in EnsurePMAsExist; zero pooled buffers

  #16107·xinzhong opened Oct 21, 2026Contributor·

  ·

• tmpfs: fill sequential faults up to the next 2 MiB boundary

  #16106·ayushr2 opened Oct 21, 2026Collaborator·

  ·
  1

• control: report unaccounted MemoryFile usage in full memory usage

  #16105·ayushr2 opened Oct 21, 2026Collaborator·

  ·

• pgalloc: let application page faults recycle waste pages

  #16104·ayushr2 opened Oct 21, 2026Collaborator·

  ·
  3

• Use regular files in execveat nofollow tests

  exported
  #16103·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• Include the terminator in the rewinddir path

  #16101·tamird opened Oct 21, 2026Contributor·

  ·

• Apply three clone_private_mount checks to overlay layers

  exported
  #16100·copybara-service[bot] opened Oct 21, 2026Bot·

  ·
  1

• Internal change.

  exported
  #16099·copybara-service[bot] opened Oct 21, 2026Bot·

  ·

• Generate Nogo export data from source

  #16098·tamird opened Oct 21, 2026Contributor·

  ·

• Build basic test images with rules_img

  #16097·tamird opened Oct 21, 2026Contributor·

  ·

• netstack: parse quoted IPv6 extension headers

  #16096·tamird opened Oct 21, 2026Contributor·

  ·

• netstack: fix forwarded IPv6 checksums

  #16095·tamird opened Oct 21, 2026Contributor·

  ·

• run seccomp filters after ptrace syscall-enter and seccomp stops

  #16094·dany74q opened Oct 21, 2026Contributor·

  ·
  1