30fc02d79f
Containerize local builds with rootless nerdctl
2026-08-18 01:36:48 +09:00
6c570da60e
Recognize terminated runsc gofers during teardown
2026-08-02 19:57:36 +09:00
b240bc1d12
Correct hostinet receive flag handling
...
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
b9c3bcfbbc
Add a repository-local host installer
2026-07-19 13:55:52 +09:00
