Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
containerd
/
nerdbox
Public
Notifications
You must be signed in to change notification settings
Fork
28
Star
166
Code
Issues
13
Pull requests
12
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Multiple container VM support
- #254
#254
Draft
dmcgowan
wants to merge 24 commits into
containerd:main
containerd/nerdbox:main
from
dmcgowan:multi
dmcgowan/nerdbox:multi
Copy head branch name to clipboard
Conversation
Commits
24
(24)
Checks
Files changed
Draft
Multiple container VM support
#254
dmcgowan
wants to merge 24 commits into
containerd:main
containerd/nerdbox:main
from
dmcgowan:multi
dmcgowan/nerdbox:multi
Copy head branch name to clipboard
Commits
Commits on Jul 17, 2026
vminit: remove guest bundle directory on container delete
Show description for fe6eb60
dmcgowan
committed
fe6eb60
View commit details
Copy full SHA for fe6eb60
Browse repository at this point
Commits on Jul 18, 2026
sandbox: implement VM-per-pod SandboxService and shared rootfs assembly
Show description for 7e7acf3
dmcgowan
committed
7e7acf3
View commit details
Copy full SHA for 7e7acf3
Browse repository at this point
sandbox: give member containers a shared guest network namespace
Show description for 5cbd0c4
dmcgowan
committed
5cbd0c4
View commit details
Copy full SHA for 5cbd0c4
Browse repository at this point
sandbox: support bind-mount volumes and pod-level DNS/hostname/sysctls
Show description for 2077417
dmcgowan
committed
2077417
View commit details
Copy full SHA for 2077417
Browse repository at this point
sandbox: share PID and IPC namespaces between member containers
Show description for dd7a37c
dmcgowan
committed
dd7a37c
View commit details
Copy full SHA for dd7a37c
Browse repository at this point
test: add critest (CRI conformance) harness using the shim sandboxer
Show description for 3fb7d47
dmcgowan
committed
3fb7d47
View commit details
Copy full SHA for 3fb7d47
Browse repository at this point
test/critest: skip known architectural-limitation specs by default
Show description for 27ca3c3
dmcgowan
committed
27ca3c3
View commit details
Copy full SHA for 27ca3c3
Browse repository at this point
Commits on Jul 19, 2026
docs: keep sandbox-architecture.md focused on current design
Show description for 5b4764e
dmcgowan
committed
5b4764e
View commit details
Copy full SHA for 5b4764e
Browse repository at this point
vm/libkrun: enter the pod network namespace on the krun_start_enter thread
Show description for ff4dc43
dmcgowan
committed
ff4dc43
View commit details
Copy full SHA for ff4dc43
Browse repository at this point
shim: clear host AppArmor profile from container specs
Show description for ca95d06
dmcgowan
and
Kern--
committed
ca95d06
View commit details
Copy full SHA for ca95d06
Browse repository at this point
vendor: add needed cri api dependency
Show description for 1d9f508
dmcgowan
committed
1d9f508
View commit details
Copy full SHA for 1d9f508
Browse repository at this point
vendor: fix shimtest dependency to include sandbox test suite
Show description for 9150ac2
dmcgowan
committed
9150ac2
View commit details
Copy full SHA for 9150ac2
Browse repository at this point
shim: fix cross-platform build breakage and file-header lint failures
Show description for 1ebed03
dmcgowan
committed
1ebed03
View commit details
Copy full SHA for 1ebed03
Browse repository at this point
shim: verify network sandbox path is backed by nsfs before pinning it
Show description for 115d7f2
dmcgowan
committed
115d7f2
View commit details
Copy full SHA for 115d7f2
Browse repository at this point
shim: prevent UDS mount placeholders from escaping the container rootfs
Show description for 9b87e04
dmcgowan
committed
9b87e04
View commit details
Copy full SHA for 9b87e04
Browse repository at this point
vminit: fix pod-pause anchor leak; reduce forwarded-socket permissions
Show description for dd68c0d
dmcgowan
committed
dd68c0d
View commit details
Copy full SHA for dd68c0d
Browse repository at this point
plugins/shim/task: split task plugin registration into manager + TTRPCPlugin
Show description for 832677e
dmcgowan
committed
832677e
View commit details
Copy full SHA for 832677e
Browse repository at this point
Commits on Jul 29, 2026
sandbox: cleanup plugin and ensure options and netns are exposed
Show description for 6821de5
dmcgowan
committed
6821de5
View commit details
Copy full SHA for 6821de5
Browse repository at this point
shim: map container UID 0 (not the host UID) in the shim's own userns
Show description for 88f98df
dmcgowan
committed
88f98df
View commit details
Copy full SHA for 88f98df
Browse repository at this point
shim/sandbox: use path.Join for in-guest paths, not filepath.Join
Show description for 52db199
dmcgowan
committed
52db199
View commit details
Copy full SHA for 52db199
Browse repository at this point
mountutil: register the partial-mount cleanup defer before the loop
Show description for 183eee9
dmcgowan
committed
183eee9
View commit details
Copy full SHA for 183eee9
Browse repository at this point
shim/task: use an explicit access mode when creating UDS placeholder files
Show description for bc74c3d
dmcgowan
committed
bc74c3d
View commit details
Copy full SHA for bc74c3d
Browse repository at this point
shim: create UDS mount placeholders for the assembled rootfs, not just a bind Source
Show description for 9704f60
dmcgowan
committed
9704f60
View commit details
Copy full SHA for 9704f60
Browse repository at this point
Commits on Jul 30, 2026
Split task service to manager and ttrpc service
Show description for 14933d4
dmcgowan
committed
14933d4
View commit details
Copy full SHA for 14933d4
Browse repository at this point
You can’t perform that action at this time.