genpolicy: add utility script for containerd pull#213

Draft

Redent0r wants to merge 263 commits intomsft-mainfrom

saulparedes/add_util_setup_script

This pull request is big! We're only showing the most recent 250 commits

Commits on Dec 19, 2023

rootfs: add back coreutils to mariner's image (#48)

danmihai1
authored and
sprt
committed
rootfs: add back ps to mariner's rootfs (#49)

danmihai1
authored and
sprt
committed
runtime: agent: SNP HOST_DATA set-up (#43)

danmihai1
authored and
sprt
committed
runtime: agent: validate policy contents (#50)

danmihai1
authored and
sprt
committed
runtime: use 10 PCI segments for the Guest (#59)

danmihai1
authored and
sprt
committed
policy: bypass empty response from OPA (#85)

danmihai1
authored and
sprt
committed
osbuilder: install device-mapper and enable udevd

wedsonaf
authored and
sprt
committed
runtime: add support for layer-src-prefix option

wedsonaf
authored and
sprt
committed
runtime: Allow disabling FS sharing for CLH/SNP
sprt
committed
runtime: Properly specify static resource mgmt
sprt
committed
runtime: decode layer string

wedsonaf
authored and
sprt
committed
osbuilder: include tardev components to rootfs

wedsonaf
authored and
sprt
committed
agent: use dm-verity if io.katacontainers.fs-opt.root-hash is set

wedsonaf
authored and
sprt
committed
agent: change to layer directory when mounting overlays

wedsonaf
authored and
sprt
committed
agent: add some context to device mapper error

wedsonaf
authored and
sprt
committed
agent: unmount storages in reverse order

wedsonaf
authored and
sprt
committed
runtime: minimum 10 seconds timeout for bootvm (#37)

danmihai1
authored and
sprt
committed
runtime: accomodate slower than expected boot (#44)

danmihai1
authored and
sprt
committed
Append systemd kernel cmdline params for initrd (#39)

dallasd1
authored and
sprt
committed
tools: keep package zstd-libs in the UVM (#104)

dallasd1
authored and
sprt
committed
runtime: enable confidential guest by default in non-SNP config (#112)

arc9693
authored and
sprt
committed
tools: pick up genpolicy improvements (#114)

danmihai1
authored and
sprt
committed
genpolicy: add topologySpreadConstraints support (#115)

danmihai1
authored and
sprt
committed
docs: add agent policy how-to doc (#116)

danmihai1
authored and
sprt
committed
Add snapshotter build files to .gitignore
sprt
committed
config: Add SEV SNP config
sprt
committed
agent: skip mount options that start with "io.katacontainers."
sprt
committed
Add src/agent/samples/policy/test-input/ to .gitignore
sprt
committed
genpolicy: Readd agent type definitions (#118)

Redent0r
authored and
sprt
committed
utarfs: implement the enumeration of xattrs (#119)

wedsonaf
authored and
sprt
committed
runtime: use shared dir to mount rootfs

wedsonaf
authored and
sprt
committed
Add dev directories to .gitignore
sprt
committed
runtime: Resolve high UVM memory footprint
sprt
committed
genpolicy: allow empty env vars (#120)

Redent0r
authored and
sprt
committed
fixup! runtime: use shared dir to mount rootfs
sprt
committed
genpolicy: changing caching so the tool can run concurrently with itself

authored and
sprt
committed
policy: Remove outdated samples
sprt
committed
Revert "runtime: use 10 PCI segments for the Guest (#59)"
sprt
committed
runtime: agent: use up to 10 PCI segments (#61)
sprt
committed
agent: Remove obsolete Rego samples
sprt
committed
Microsoft mandatory file
microsoft-github-policy-service[bot]
authored
Add kata metapackage change
miz060
committed
Add new varaiable to differntiate vanilla and coco
miz060
committed

Commits on Dec 21, 2023

Commits on Dec 22, 2023

Commits on Dec 28, 2023

Commits on Dec 29, 2023

Commits on Jan 6, 2024

Merge pull request #140 from microsoft/danmihai1/hooks
miz060
authored

Commits on Jan 12, 2024

runtime: disable protection check
sprt
committed

Commits on Jan 16, 2024

Merge pull request #141 from microsoft/sprt/debug-conf-guest
sprt
authored

Commits on Jan 17, 2024

Commits on Jan 21, 2024

Commits on Jan 24, 2024

Commits on Jan 26, 2024

Commits on Jan 31, 2024

Commits on Feb 2, 2024

Commits on Feb 9, 2024

Commits on Feb 12, 2024

runtime: make sev_snp_guest default to false
sprt
committed

Commits on Feb 13, 2024

Merge pull request #160 from microsoft/wedsonaf/tardev
manuelh-dev
authored

Commits on Feb 14, 2024

Merge pull request #154 from microsoft/sprt/align-vanilla-sources
sprt
authored

Commits on Feb 19, 2024

Commits on Feb 20, 2024

Merge pull request #164 from microsoft/saulparedes/fix_ingress_test
Redent0r
authored

Commits on Mar 5, 2024

Commits on Mar 13, 2024

genpolicy: update samples
Redent0r
committed

Commits on Mar 19, 2024

Merge pull request #165 from microsoft/saulparedes/update_samples
Redent0r
authored

Commits on Mar 20, 2024

Commits on Mar 21, 2024

Commits on Mar 27, 2024

genpolicy: disable env variable verification

danmihai1
authored and
Redent0r
committed
genpolicy: default env if image doesn't have env

danmihai1
authored and
Redent0r
committed
genpolicy: update sample
Redent0r
committed

Commits on Mar 28, 2024

Merge pull request #168 from microsoft/3.2.0.azl0.genpolicy1-msft-main
Redent0r
authored

Commits on Apr 8, 2024

genpolicy: optional PodTemplateSpec metadata field

danmihai1
authored and
Redent0r
committed
genpolicy: ignore the nodeName field

danmihai1
authored and
Redent0r
committed

Commits on Apr 9, 2024

genpolicy: fix ConfigMap volume mount paths

danmihai1
authored and
Redent0r
committed
genpolicy: ignore volume configMap optional field

danmihai1
authored and
Redent0r
committed
Merge pull request #171 from microsoft/saulparedes/genpolicy_sync_1
Redent0r
authored
genpolicy: allow separate paths for rules and settings files

malt3
authored and
Redent0r
committed
genpolicy: support non-default namespace name

danmihai1
authored and
Redent0r
committed
genpolicy: ignore empty YAML as input

danmihai1
authored and
Redent0r
committed
Merge pull request #172 from microsoft/saulparedes/genpolicy_sync_2
Redent0r
authored

Commits on Apr 10, 2024

genpolicy: update default values

danmihai1
authored and
Redent0r
committed
genpolicy: add easy way to allow CloseStdinRequest

danmihai1
authored and
Redent0r
committed
genpolicy: improve logging from ExecProcessRequest

danmihai1
authored and
Redent0r
committed
genpolicy: fix typo in policy logging

danmihai1
authored and
Redent0r
committed
genpolicy: panic when we see a volume mount subpath
Redent0r
committed
genpolicy: add restartPolicy to container struct

3u13r
authored and
Redent0r
committed
genpolicy: reduce policy debug prints

danmihai1
authored and
Redent0r
committed
genpolicy: update samples
Redent0r
committed
Merge pull request #173 from microsoft/saulparedes/genpolicy_sync_3
Redent0r
authored
agent: add SMB storage handler
arc9693
committed
runtime: add support to handle SMB mounts
arc9693
committed

Commits on Apr 11, 2024

genpolicy: add containerd pull method
Redent0r
committed

Commits on Apr 14, 2024

Commits on Apr 15, 2024

Merge pull request #175 from microsoft/saulparedes/support_readonly_hostpath
Redent0r
authored

Commits on Apr 16, 2024

Commits on Apr 17, 2024

Commits on Apr 18, 2024

Commits on Apr 22, 2024

genpolicy: add missing cache improvements
Redent0r
committed

Commits on Apr 23, 2024

Merge pull request #181 from microsoft/saulparedes/add_missing_cache_improvements
Redent0r
authored

Commits on Apr 25, 2024

Commits on Apr 26, 2024

Commits on Apr 30, 2024

Commits on May 2, 2024

Commits on May 8, 2024

samples: don't execute genpolicy as root user
danmihai1
committed

Commits on May 13, 2024

Commits on May 16, 2024

Commits on May 20, 2024

Merge pull request #192 from microsoft/danmihai1/genpolicy-cache
danmihai1
authored

Commits on May 29, 2024

clh: update sev snp param
Redent0r
committed

Commits on Jun 5, 2024

Merge pull request #197 from microsoft/saulparedes/update_sev_snp_param
Redent0r
authored

Commits on Jun 6, 2024

Commits on Jun 11, 2024

samples: add common images category
Redent0r
committed

Commits on Jun 12, 2024

genpolicy: update policy samples
Manuel Huber
committed

Commits on Jun 13, 2024

Commits on Jul 11, 2024

rootfs: Install Rust only when necessary
Manuel Huber
committed
build: allow rootfs builds w/o git or VERSION file deps
Manuel Huber
committed
samples: change job.yaml to an mcr container image
danmihai1
committed

Commits on Jul 12, 2024

Commits on Jul 15, 2024

Commits on Jul 16, 2024

Commits on Jul 17, 2024

Commits on Aug 5, 2024

genpolicy: add utility script for containerd pull
Redent0r
committed

Commits on Aug 6, 2024

genpolicy: improve setup script
Redent0r
committed

Commits on Aug 7, 2024

genpolicy: add guide for setup containerd pull
Redent0r
committed