State is the status of a process.

Action is taken upon rule match in Seccomp

Arg is a rule to match a specific syscall argument in Seccomp

BaseState represents the platform agnostic pieces relating to a running container's state

Bytemsg has the following representation | nlattr len | nlattr type | | value | pad |

Caps holds the capabilities for a container.

Config defines configuration options for executing a process inside a contained environment.

Container is a libcontainer container object.

Event struct for encoding the event data to json.

IDMap represents UID/GID Mappings for User Namespaces.

IO holds the process's STDIO

KernelVersion holds information about the kernel.

LinuxMemoryPolicy contains memory policy configuration.

LinuxNetDevice represents a single network device to be added to the container's network namespace.

* * About Intel RDT features: * Intel platforms with new Xeon CPU support Resource Director Technology (RDT). * Cache Allocation Technology (CAT) a

Namespace defines configuration for each namespace. It specifies an alternate path that is able to be joined via setns.

Namespace defines configuration for each namespace. It specifies an alternate path that is able to be joined via setns.

Network defines configuration for a container's networking stack The network configuration can be omitted from a container causing the container to b

Operator is a comparison operator to be used when matching syscall arguments in Seccomp

Process defines the configuration and IO for a process inside a container. Note that some Process properties are also present in container configurat

Route defines a routing table entry. Routes can be specified to create entries in the routing table as the container is started. All of destination,

Seccomp represents syscall restrictions By default, only the native architecture of the kernel is allowed to be used for syscalls. Additional architec

Stat_t represents the information from /proc/[pid]/stat, as described in proc(5) with names based on the /proc/[pid]/status fields.

State represents a running container's state

Stats is the runc specific stats structure for stability when encoding and decoding stats.

Status is the status of a container.

Syscall is a rule to match a syscall in Seccomp

VerifyInodeFunc is the callback passed to [VerifyInode] to check if the inode is the expected type (and on the correct filesystem type, in the case of

containerState represents the platform agnostic pieces relating to a running container's status and state

exit models a process exit status with the pid and exit status.

initConfig is used for transferring parameters from Exec() to Init(). It contains: - original container config; - some [Process] properties; - set of

initError is used to wrap errors for passing them via JSON, as encoding/json can't unmarshal into error type.

int32plus is a collection of int types with >=32 bits.

Cache the result of intelrdt IsEnabled functions to avoid repeated sysfs access and enable mocking for unit tests.

linuxSetnsInit performs the container's initialization for running a new process inside an existing container.