{"push_id":3049271311,"size":6,"distinct_size":6,"ref":"refs/heads/seccomp","head":"e6152038698e0cdc33191266406c293f860a13b3","before":"18d7c10b9feee0f79f911b6b949e7f6b1513b2e7","commits":[{"sha":"eb7ac0de134ce33ed20c782baef637ac33a430ed","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added Seccomp-related protobuf messages.\n\nSee summary.\n\nReview: https://reviews.apache.org/r/68017","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/eb7ac0de134ce33ed20c782baef637ac33a430ed"},{"sha":"42b46b58e715154852c1f8db477584f491a45575","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added `SeccompFilter` class.\n\n`SeccompFilter` class is a wrapper for `libseccomp` API. Its main\npurpose is to provide a translation of the `ContainerSeccompProfile`\nmessage into calls of `libseccomp` API.\n\nReview: https://reviews.apache.org/r/68018","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/42b46b58e715154852c1f8db477584f491a45575"},{"sha":"40cb5f9b41bda793bd4ae4905ace3f90b34e2dbe","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added a parser for the Docker Seccomp config format.\n\nDocker Seccomp config is a JSON file containing Seccomp filtering\nrules. This patch introduces a parser for Docker Seccomp config format.\nThis parser accepts a JSON-string, parses and validates it, then\nreturns a prepared `ContainerSeccompProfile` message.\n\nReview: https://reviews.apache.org/r/68019","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/40cb5f9b41bda793bd4ae4905ace3f90b34e2dbe"},{"sha":"e1914410d44c318d2374aa8a5f57d719e343b314","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added Seccomp-related flags to the agent.\n\n`--seccomp_config_dir` and `--seccomp_profile_name` flags have been\nadded to the agent. These flags are used by the `linux/seccomp`\nisolator to specify the path of the directory containing Seccomp\nprofiles and the path of the default Seccomp profile.\n\nReview: https://reviews.apache.org/r/68020","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/e1914410d44c318d2374aa8a5f57d719e343b314"},{"sha":"5c8d245dd864032c9295228cb8ec1d2d89100ad1","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added `linux/seccomp` isolator.\n\nThis patch introduces `linux/seccomp` isolator which is used for\npreparing `ContainerSeccompProfile` for the Mesos containerizer\nlauncher. If the `ContainerConfig` message has an info about Seccomp\nprofile name, then this info will be used to locate a Seccomp profile.\nThe given Seccomp profile is parsed and the resulting\n`ContainerSeccompProfile` is stored in the `ContainerLaunchInfo`\nmessage.\n\nReview: https://reviews.apache.org/r/68021","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/5c8d245dd864032c9295228cb8ec1d2d89100ad1"},{"sha":"e6152038698e0cdc33191266406c293f860a13b3","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Enabled Seccomp filter in the containerizer launcher.\n\nContainerizer launcher creates an instance of `SeccompFilter`, which is\nused to setup Seccomp profile using `ContainerSeccompProfile` message\nprepared by the `linux/seccomp` isolator. The Seccomp filter is loaded\nright before calling `execve()`, so that a container will be running\nwith a syscall filtering enabled.\n\nReview: https://reviews.apache.org/r/68022","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/e6152038698e0cdc33191266406c293f860a13b3"}]}
{"actor":{"display_login":"abudnik"}}