v0.1.6

What's Changed

• Use Aya in the userspace by @vadorovsky in #142
• Ensure that the binary is named lockcd by @vadorovsky in #160
• Add new LSM_HOOK to restrict root user by @mjura in #158
• Use references, stop overusing clone() by @vadorovsky in #161
• Fix name of LSM hook for task_fix_setuid by @mjura in #162
• runc: Add path used by torcx and Flatcar Linux by @vadorovsky in #163
• Update kube requirement from 0.67 to 0.68 by @dependabot in #164
• terraform: Disable strict key checking on scp by @vadorovsky in #165
• docs: Make a separate section for developers by @vadorovsky in #167
• Fix lockc on Kubernetes by @vadorovsky in #168
• tokio: Fix the way of using oneshot::Sender by @vadorovsky in #170
• docker: Cache cargo builds by @vadorovsky in #173
• lockcd: Set default log level to debug when building with debug profile by @vadorovsky in #172
• docker: Add missing packages for rust-{gdb,lldb} debuggers by @vadorovsky in #174
• bpf: Fix map pinning by @vadorovsky in #171

Full Changelog: v0.1.5...v0.1.6

What's Changed

• Use Aya in the userspace by @vadorovsky in #142
• Ensure that the binary is named lockcd by @vadorovsky in #160
• Add new LSM_HOOK to restrict root user by @mjura in #158
• Use references, stop overusing clone() by @vadorovsky in #161
• Fix name of LSM hook for task_fix_setuid by @mjura in #162
• runc: Add path used by torcx and Flatcar Linux by @vadorovsky in #163
• Update kube requirement from 0.67 to 0.68 by @dependabot in #164
• terraform: Disable strict key checking on scp by @vadorovsky in #165
• docs: Make a separate section for developers by @vadorovsky in #167
• Fix lockc on Kubernetes by @vadorovsky in #168
• tokio: Fix the way of using oneshot::Sender by @vadorovsky in #170
• docker: Cache cargo builds by @vadorovsky in #173
• lockcd: Set default log level to debug when building with debug profile by @vadorovsky in #172
• docker: Add missing packages for rust-{gdb,lldb} debuggers by @vadorovsky in #174
• bpf: Fix map pinning by @vadorovsky in #171
• Fix Dockerfile and rustup-init by @mjura in #180

Full Changelog: v0.1.5...v0.1.6

v0.1.5

What's Changed

• docker: Pin rustc version to 1.56.1 by @vadorovsky in #113
• Restrict access to K8s secret token by @mjura in #103
• Move lockc helm chart to new repo by @mjura in #115
• Update kube requirement from 0.64 to 0.65 by @dependabot in #119
• Update procfs requirement from 0.11 to 0.12 by @dependabot in #118
• Adopt examples to Kuberentes v1.23 by @mjura in #120
• Switch to bitnami/nginx:1.21.4 containers by @mjura in #121
• settings: Add all Docker stoage drivers by @vadorovsky in #123
• Update lockc installation on Kubernetes by @mjura in #124
• Add /opt to allowed directories by @mjura in #125
• Enable DOCKER_BUILDKIT for building process by @mjura in #127
• Update kube requirement from 0.65 to 0.66 by @dependabot in #143
• runc: Remove unused fields, stop pinning to old Rust version by @vadorovsky in #144
• clang-format: Honor the Linux kernel coding style by @vadorovsky in #146
• Remove unused dependencies by @vadorovsky in #147
• Temporary disable kubeProxyReplacement for Cilium by @mjura in #150
• Try to reuse pinned BPF maps by @vadorovsky in #145
• Remove runtimes map by @vadorovsky in #148
• Update example image for OpenStack terraform by @mjura in #154
• Set proper default options for lockcd by @mjura in #153
• Update kube and k8s-openapi by @vadorovsky in #156
• Prepare for release 0.1.5 by @vadorovsky in #157

Full Changelog: v0.1.4...v0.1.5

v0.1.4

What's Changed

• Build container images on push by @mjura in #104
• docker: cargo: Always use release profile by @vadorovsky in #105

Full Changelog: v0.1.3...v0.1.4

Installation

helm install lockc contrib/helm/lockc/ --namespace kube-system \
    --set lockcd.image.repository=ghcr.io/rancher-sandbox/lockc \
    --set lockcd.image.tag=v0.1.4

v0.1.3

What's Changed

• Remove lockc-runc-wrapper by @vadorovsky in #93
• Update kube requirement from 0.63 to 0.64 by @dependabot in #96
• runc: Handle --process option by @vadorovsky in #98
• Build lockc on OpenStack with openSUSE Leap image by @mjura in #99
• docker: Use openSUSE Leap as a base image for all stages by @vadorovsky in #101

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Features

• Ability to hide directories from container's filesystem from access (#48, #74)
• Docker integration (#57, #73)

Bugfixes

• Reduce enormously huge memory footprint of BPF maps related to containers and processes (#82, #84)
• Add missing 9p drivers in virtual machines / dev environment (#79)