runsc command
Binary runsc implements the OCI runtime interface.
Directories ΒΆ
Path | Synopsis |
---|---|
runsc/boot | Package boot loads the kernel and runs a container. |
runsc/boot/filter | Package filter installs seccomp filters to prevent prohibited syscalls in case it's compromised. |
runsc/boot/filter/config | Package config defines all syscalls the sandbox is allowed to make to the host. |
runsc/boot/filter/dumpfilter | dumpfilter dumps the seccomp-bpf program used by the Sentry. |
runsc/boot/portforward | Package portforward holds the infrastructure to support the port forward command. |
runsc/boot/pprof | Package pprof provides a stub to initialize custom profilers. |
runsc/boot/procfs | Package procfs holds utilities for getting procfs information for sandboxed processes. |
runsc/cgroup | Package cgroup provides an interface to read and write configuration to cgroup. |
runsc/cli | Package cli is the main entrypoint for runsc. |
runsc/cmd | Package cmd holds implementations of the runsc commands. |
runsc/cmd/metricserver | The metricserver binary is a separate binary that implements the 'runsc metric-server' subcommand. |
runsc/cmd/metricserver/metricservercmd | Package metricservercmd partially implements the 'metric-server' subcommand. |
runsc/cmd/nvproxy | Package nvproxy provides subcommands for the nvproxy command. |
runsc/cmd/trace | Package trace provides subcommands for the trace command. |
runsc/cmd/util | Package util groups a bunch of common helper functions used by commands. |
runsc/config | Package config provides basic infrastructure to set configuration settings for runsc. |
runsc/console | Package console contains utilities for working with pty consols in runsc. |
runsc/container | Package container creates and manipulates containers. |
runsc/donation | Package donation tracks files that are being donated to a child process and using flags to notified the child process where the FDs are. |
runsc/flag | Package flag wraps flag primitives. |
runsc/fsgofer | Package fsgofer provides a lisafs server implementation which gives access to local files. |
runsc/fsgofer/filter | Package filter defines all syscalls the gofer is allowed to make, and installs seccomp filters to prevent prohibited syscalls in case it's compromised. |
runsc/hostsettings | Package hostsettings provides suggestions or adjustments for host kernel settings to improve runsc performance, stability, or security. |
runsc/metricserver | Package metricserver implements a Prometheus metric server for runsc data. |
runsc/metricserver/containermetrics | Package containermetrics returns metrics and labels interesting to export about a container or sandbox. |
runsc/mitigate | Package mitigate provides libraries for the mitigate command. |
runsc/profile | Package profile contains profiling utils. |
runsc/sandbox | Package sandbox creates and manipulates sandboxes. |
runsc/sandbox/bpf | Package bpf provides compiled bpf programs as byte slices. |
runsc/specutils | Package specutils contains utility functions for working with OCI runtime specs. |
runsc/specutils/safemount_test | safemount_runner is used to test the SafeMount function. |
runsc/specutils/seccomp | Package seccomp implements some features of libseccomp in order to support OCI. |
runsc/starttime | Package starttime holds the time the `runsc` command started. |
runsc/version | Package version holds a string containing version information for runsc. |
- Version
- v0.0.0-20250605235530-a6711d1e1dc6 (latest)
- Published
- Jun 5, 2025
- Platform
- linux/amd64
- Imports
- 2 packages
- Last checked
- 4 hours ago –
Tools for package owners.