17 Pull requests merged by 2 people

• Remove environment hook from BuildKite hooks directory.

  #11752 merged Jun 12, 2025

• Create intro to gVisor security page.

  #11797 merged Jun 11, 2025

• nvproxy: Add support for 575.57.08.

  #11809 merged Jun 11, 2025

• Deflake TestIPv6DisableAllSysctl.

  #11803 merged Jun 11, 2025

• netstack: Don't treat ipv4 link-local addresses specially

  #11800 merged Jun 11, 2025

• overlayfs: Clear RENAME_NOREPLACE before calling into layers.

  #11798 merged Jun 10, 2025

• Fix the link endpoint panic.

  #11802 merged Jun 10, 2025

• gofer: Support restore of deleted files whose original path is occupied.

  #11785 merged Jun 6, 2025

• overlayfs: Do not SetStat() UID/GID for newly created file.

  #11796 merged Jun 6, 2025

• Stub for netlink netfilter sockets.

  #11793 merged Jun 6, 2025

• Add instructions on DNS config to run docker in gVisor on GKE autopilot.

  #11795 merged Jun 6, 2025

• nvproxy: Add instructions for adding support for new NVIDIA driver versions.

  #11783 merged Jun 6, 2025

• runsc/do: allow to add host bind-mounts

  #11792 merged Jun 5, 2025

• runsc/do: Allow specifying an EROFS root image

  #11788 merged Jun 5, 2025

• systrap: don't panic if the main stub process can't be created

  #11791 merged Jun 5, 2025

• Update golang to 1.24.1

  #11789 merged Jun 5, 2025

• Update golang to 1.24.1

  #11790 merged Jun 5, 2025

5 Pull requests opened by 1 person

• Refactor nftables package and exposed it to tcpip/stack/

  #11804 opened Jun 11, 2025

• Add support for 575.57.08

  #11805 opened Jun 11, 2025

• netstack: remove timed-out endpoints from pendingEndpoints queue.

  #11806 opened Jun 11, 2025

• Add initial VM qualification suite

  #11807 opened Jun 11, 2025

• Internal change

  #11808 opened Jun 11, 2025

3 Issues closed by 3 people

• mv prompts about overwriting non-existent files

  #11794 closed Jun 10, 2025

• ffmpeg with `h264_nvenc` fails to run on gVisor with `-nvproxy`

  #9452 closed Jun 7, 2025

• Checkpoint fails for containers with deleted-but-open files in --overlay2=none mode

  #11425 closed Jun 6, 2025

6 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Newly created sandbox in host networking mode has lo interface DOWN

  #11766 commented on Jun 6, 2025 • 0 new comments

• gVisor unprivileged user can't access file in rootless mode

  #9918 commented on Jun 8, 2025 • 0 new comments

• netstack: possible compat issues or malfunctions of non-standard TCP Timestamp Options

  #11536 commented on Jun 11, 2025 • 0 new comments

• netstack: remove timed-out endpoints from pendingEndpoints queue.

  #11557 commented on Jun 11, 2025 • 0 new comments

• Hard links Support Phase 1: Gofer Client dentry/inode refactor

  #11734 commented on Jun 5, 2025 • 0 new comments

• fix(checklocks): enhance diagnostics and deduplication in failure reporting

  #11741 commented on Jun 6, 2025 • 0 new comments