19 Pull requests merged by 2 people

• Nftables support handles for rules.

  #11930 merged Jul 23, 2025

• Update seccomp filters to support new kernels

  #11956 merged Jul 23, 2025

• Create a small DSL for streamlining nftables request creation for tests.

  #11916 merged Jul 22, 2025

• NFtables testing cleanup

  #11917 merged Jul 22, 2025

• Implemented Delete Chain functionality for nftables.

  #11954 merged Jul 22, 2025

• specutils: Add function to allow logging to a custom logger function.

  #11923 merged Jul 22, 2025

• GPU compatibility test: Accept image name with "cos-arm64-lm-" prefix.

  #11951 merged Jul 22, 2025

• runsc: Move checkpoint options to sandbox.CheckpointOpts.

  #11948 merged Jul 22, 2025

• PGO: Reduce combinations of nginx benchmarks run for PGO purposes.

  #11947 merged Jul 21, 2025

• sentry: fix panic in TTY TIOCSPGRP

  #11945 merged Jul 21, 2025

• sentry: fix panic in TTY TIOCSPGRP

  #11946 merged Jul 21, 2025

• iperf: Fix benchmark for low b.N values and parallelization enabled.

  #11944 merged Jul 21, 2025

• iperf_test: Better debug logging on failure.

  #11939 merged Jul 21, 2025

• Fix directfs restore for deleted regular file when read handle is not available

  #11919 merged Jul 20, 2025

• Implement functionality for Nftables GetChain message.

  #11900 merged Jul 18, 2025

• PGO benchmarks: Only run a representative subset of benchmark tests.

  #11938 merged Jul 18, 2025

• Update Nftables Gettable

  #11936 merged Jul 17, 2025

• Add mutex locking to netfilter socket operations with nftables.

  #11891 merged Jul 17, 2025

• Allow lisafs server to open on deleted files in runsc gofer.

  #11934 merged Jul 17, 2025

10 Pull requests opened by 3 people

• Fix build for Bazel 8.

  #11935 opened Jul 17, 2025

• Fix build for Bazel 8.

  #11941 opened Jul 18, 2025

• Update runsc profiles for PGO (profile-guided optimizations), 2025-07-22.

  #11949 opened Jul 22, 2025

• Update runsc profiles for PGO (profile-guided optimizations), 2025-07-22.

  #11950 opened Jul 22, 2025

• pgalloc: implement async page saving

  #11952 opened Jul 22, 2025

• aio: add LinuxQueue

  #11953 opened Jul 22, 2025

• Explicitly unlock packetEPsMu to avoid circular locking.

  #11957 opened Jul 22, 2025

• Fix: Ensure that unbound Netlink sockets are bound when sending a message.

  #11961 opened Jul 23, 2025

• Install docker compose plugin in gVisor's dind image.

  #11962 opened Jul 23, 2025

• Support privileged executables inside the sandbox

  #11963 opened Jul 24, 2025

4 Issues closed by 2 people

• Support no-op `personality(2)` bits

  #10756 closed Jul 22, 2025

• Panic in TTY IOCTL `TIOCSPGRP`

  #11943 closed Jul 21, 2025

• Checkpoint failed with directfs: "failed to open read handle for deleted file"

  #11903 closed Jul 20, 2025

• Error Using Runtime Monitoring

  #11905 closed Jul 17, 2025

6 Issues opened by 5 people

• Invalid TCP checksums for packets from published ports in Docker Desktop

  #11960 opened Jul 23, 2025

• Allow sandboxed containers to use KVM

  #11959 opened Jul 23, 2025

• Support running Flatpaks in gVisor

  #11958 opened Jul 23, 2025

• Unable to install Swift in docker-in-gvisor

  #11955 opened Jul 22, 2025

• SECCOMP Crash after update from 20250120.0 to 20250714.0

  #11942 opened Jul 19, 2025

• Run docker compose in gVisor

  #11937 opened Jul 17, 2025

4 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Run docker in gVisor with GPU

  #11909 commented on Jul 23, 2025 • 0 new comments

• Support and document testing on macOS with CLT

  #11899 commented on Jul 23, 2025 • 0 new comments

• Add test for workdir being a symlink to another folder

  #11915 commented on Jul 22, 2025 • 0 new comments

• Don't error out when deleting parent cgroup dirs

  #11933 commented on Jul 22, 2025 • 0 new comments