opencontainers / opencontainers/runc
IMA Namespace support
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13.5k
- Forks
- 2.3k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 30
Description
The Linux kernel community is now working on supporting IMA namespaces
and it is almost done. It is a new kernel feature that allows isolation of Platform Configuration Register (PCR) values, Measurement Logs (ML), etc. As this need to add a new flag for json configuration the related issue opened for runtime-spec.
Signed-off-by: Ilya Hanov ilya.hanov@huawei-partners.com
Advanced Software Technology Lab
Huawei
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No runc files, tests, or entry points are named. Start by reading the linked Linux IMA namespaces proposal and runtime-spec issue #1163, then trace how runc handles JSON configuration flags. Done means the required IMA namespace configuration is supported consistently with the related specification change.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- cli, operating-systems
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100