Fix a few typos

Author: avagin

.codespellrc

@@ -0,0 +1,3 @@
+[codespell]
+skip = ./.git,tags,go.mod,go.sum,./test/image/latin10k.txt,./website/assets/images
+ignore-words-list = savable,adin

Makefile

@@ -97,7 +97,7 @@ endif
 ##
 ## Development helpers and tooling.
 ##
-##   These targets faciliate local development by automatically
+##   These targets facilitate local development by automatically
 ##   installing and configuring a runtime. Several variables may
 ##   be used here to tweak the installation:
 ##     RUNTIME         - The name of the installed runtime (default: $BRANCH_NAME).
@@ -755,3 +755,7 @@ release: $(RELEASE_KEY) $(RELEASE_ARTIFACTS)/$(ARCH)
 tag: ## Creates and pushes a release tag.
 	@tools/tag_release.sh "$(RELEASE_COMMIT)" "$(RELEASE_NAME)" "$(RELEASE_NOTES)"
 .PHONY: tag
+
+codespell:
+	codespell
+.PHONY: codespell

WORKSPACE

@@ -3,7 +3,7 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive", "http_file"
 
 # Root certificates.
 #
-# Note that the sha256 hash is ommitted here intentionally. This should not be
+# Note that the sha256 hash is omitted here intentionally. This should not be
 # used in any part of the build other than as certificates present in images.
 http_file(
     name = "google_root_pem",

pkg/sentry/kernel/auth/capability_set_test.go

@@ -22,7 +22,7 @@ import (
 	"gvisor.dev/gvisor/pkg/errors/linuxerr"
 )
 
-// capsEquals returns trun when the given creds' capabilities match the given caps.
+// capsEquals returns true when the given creds' capabilities match the given caps.
 func capsEquals(creds *Credentials, caps TaskCapabilities) bool {
 	return creds.PermittedCaps == caps.PermittedCaps &&
 		creds.InheritableCaps == caps.InheritableCaps &&

pkg/sentry/kernel/kernel_restore.go

@@ -30,7 +30,7 @@ type Saver interface {
 // +stateify savable
 type CheckpointGeneration struct {
 	// Count is incremented every time a checkpoint is triggered, even if the
-	// chekpoint failed.
+	// checkpoint failed.
 	Count uint32
 	// Restore indicates if the current instance resumed after the checkpoint or
 	// it was restored from a checkpoint.

pkg/sentry/platform/platform.go

@@ -273,7 +273,7 @@ type Context interface {
 	// Release() releases any resources associated with this context.
 	Release()
 
-	// PrepareSleep() is called when the tread switches to the
+	// PrepareSleep() is called when the thread switches to the
 	// interruptible sleep state.
 	PrepareSleep()
 }

pkg/sentry/seccheck/sinks/remote/test/server.go

@@ -80,7 +80,7 @@ func (s *Server) Count() int {
 	return len(s.points)
 }
 
-// Reset throws aways all points received so far and returns the number of
+// Reset throws away all points received so far and returns the number of
 // points discarded.
 func (s *Server) Reset() int {
 	s.cond.L.Lock()

pkg/sentry/socket/netlink/route/protocol.go

@@ -162,7 +162,7 @@ func (p *Protocol) getLink(ctx context.Context, s *netlink.Socket, msg *nlmsg.Me
 	return nil
 }
 
-// newLink handles RTM_NEWLINK reqeusts.
+// newLink handles RTM_NEWLINK requests.
 func (p *Protocol) newLink(ctx context.Context, s *netlink.Socket, msg *nlmsg.Message, ms *nlmsg.MessageSet) *syserr.Error {
 	stack := s.Stack()
 	if stack == nil {

pkg/sentry/socket/netstack/stack.go

@@ -184,7 +184,7 @@ func (s *Stack) SetInterface(ctx context.Context, msg *nlmsg.Message) *syserr.Er
 }
 
 func (s *Stack) setLink(ctx context.Context, id tcpip.NICID, linkAttrs map[uint16]nlmsg.BytesView) *syserr.Error {
-	// IFLA_NET_NS_FD has to be handled first, because other parameters may be reseted.
+	// IFLA_NET_NS_FD has to be handled first, because other parameters may be reset.
 	if v, ok := linkAttrs[linux.IFLA_NET_NS_FD]; ok {
 		fd, ok := v.Uint32()
 		if !ok {

pkg/sentry/socket/plugin/stack/notifier.go

@@ -99,7 +99,7 @@ func (n *Notifier) UpdateFD(fd uint32) {
 // object. Once notifications arrive, they are dispatched to the
 // registered queue.
 func (n *Notifier) waitAndNotify(ioInit chan int32) error {
-	// plugin stack leverages TLS varaibles, so bind this goroutine with
+	// plugin stack leverages TLS variables, so bind this goroutine with
 	// one specific OS thread
 	runtime.LockOSThread()