Skip to content

0.15
Compare
Choose a tag to compare
@giuseppe giuseppe released this 23 Sep 15:00
0.15
This tag was signed with the committer’s verified signature.
giuseppe Giuseppe Scrivano
GPG key ID: 67E38F7A8BA21772
Learn about vigilant mode.
56ca95e
This commit was signed with the committer’s verified signature.
giuseppe Giuseppe Scrivano
GPG key ID: 67E38F7A8BA21772
Learn about vigilant mode.
  • add support for OCI unified cgroup v2.
  • add json format option to crun list.
  • get last kernel capability dynamically instead of using a build time constant.
  • enable all available cgroup controllers.
  • support the seccomp SCMP_ACT_LOG action.
  • support the seccomp SCMP_ACT_KILL_THREAD action.
  • properly set a SELinux label for the mqueue mount.
  • crun kill uses pidfd when supported.
  • experimental support for seccomp notifications.
  • fix bundle option for crun create and crun run.
  • allow to declare path to config file.
  • check /sys/kernel/security/apparmor when using AppArmor.
  • doesn't accept type=bind alone anymore, but require either "bind" or "rbind" to be present in the mount flags.
Assets 10
Loading