Files
packages/utils/oci-runtime-tools
Daniel Golle 5035328d8d oci-runtime-tools: carry the pending validation fixes
Most cgroup tests fail on OpenWrt because the test suite can only read
cgroup v1, and several assertions contradict the runtime-spec or depend
on the test host. Carry the fixes pending upstream in
opencontainers/runtime-tools until they are merged: #812 (cgroup v2
reader), #813 (lifecycle assertions), #814 (pids limit by value), #816
(device rules checked from inside the container), #820 (misc_props
process), #821 (blkio rules on an existing block device) and #822
(RLIMIT_NOFILE read from a child process).

The default seccomp profile of the test configurations lists only the
32-bit time syscalls. On 32-bit targets the Go runtime of runtimetest
uses futex_time64 on Linux 5.1 and later, which the profile denies, so
runtimetest crashes inside every container and most tests report
nothing on i386. Add a patch allowing the time64 variant of every
syscall the profile already allows.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-10-20 20:03:57 +01:00
..