Official Packages See attached binaries. Changelog Added Support Sysbox on Ubuntu 24.04 with kernel 6.8+ under containerd 2.x; fixes sysfs mount failures ("mount through procfd: operation not permitted") during container/pod creation (issue #1013). Fix bug where a container's requested --ulimit nofile soft value silently failed to apply when the hard limit exceeded Go's internal rlimit cache thres…
Official Packages See attached binaries. Changelog Added Port runc security patches for CVEs 2025-3133, 2025-52881, and 2025-52565. Support volatile overlayfs remounting. Add features command to sysbox-runc. Enable newer versions of runc to run inside Sysbox containers properly by trapping openat2 system call to allow access to sysbox-fs mounts under /proc and /sys. sysbox-deploy-k8s: add support…
Official Packages See attached binaries. Changelog Added Add support for binfmt_misc namespacing inside Sysbox containers (kernel 6.7+); issue #592. Add edition and version info in sysbox-mgr and sysbox-fs logs. Fix bug when starting/stopping containers with large number of layers, on kernels without idmapping or shiftfs. Fix bug when unmounting fuse device inside Sysbox container (issue #854). Fi…
Official Packages See attached binaries. Changelog Added Fix to ensure "docker --net=host" works inside Sysbox containers (issue #712). Fix bug when mounting host kernel headers into containers (issue #727). Fix emulation of /sys/devices/virtual/* inside containers (issue #719). Don't intercept *xattr syscalls by default (improves performance). Add feature to skip shiftfs and idmapping on specific…
Official Packages See attached binaries. Changelog Added Fix to allowing running x86 apps in Sysbox containers (issue #350). Fix sysbox-fs nsenter mount leak. Fix sysbox emulation of /proc and /sys in containers for kernels 6.5+. Add hardening against CVE 2024-21626. Fix ordering of mounts under /run for containers with systemd (issue #767). Checksums sha256sum sysbox-ce_0.6.4-0.linux_amd64.deb d0…
Official Packages See attached binaries. Changelog Added Update to Golang 1.22. Implement 'relaxed-read-only' mode to ease the bind-mount requirements of read-only containers. Enhance sysbox-fs emulation to allow writes to '/proc/sys/kernel/shm*' paths. Fix emulation of /proc/sys/kernel/random (issue #785). Fix bug in sysbox-fs that resulted in left-over nsenter mounts of procfs and sysfs (issue #…
Official Packages See attached binaries. Changelog Added Add support for k8s v1.31 and deprecate k8s v1.27. Ensure latest OCI runc works inside Sysbox containers (issue #879). Retry fix for bug in sysbox-fs that resulted in left-over nsenter mounts of procfs and sysfs (issue #829). Fix bug in parsing of subid limits in /etc/login.defs (issue #870). Fix bug in Sysbox shiftfs checker that was causin…
Official Packages 📦 sysbox-ce_0.6.2-0.linux_amd64.deb 📦 sysbox-ce_0.6.2-0.linux_arm64.deb Changelog Fix bug in Sysbox's checking of host support for idmapping and shiftfs. Fix storage leak in /var/lib/sysbox when using Sysbox on K8s clusters. Fix bug in Sysbox's handling of "docker run -w" flag. Change disable-inner-image-preload flag to allow running (but not committing) sysbox containers with pr…
Official Packages 📦 sysbox-ce_0.6.1-0.linux_amd64.deb 📦 sysbox-ce_0.6.1-0.linux_arm64.deb Changelog Added support for ID-mapped overlayfs lower layers; eliminates need for shiftfs and Sysbox rootfs chown; requires kernel 5.19+. Have Sysbox perform shiftfs and ID-mapping functional checks during init (issue #596). Fixed rootfs cloning to prevent inode leakage (for hosts with kernel < 5.19 and no sh…
Official Packages 📦 sysbox-ce_0.5.2-linux_amd64.deb 📦 sysbox-ce_0.5.2-linux_arm64.deb Changelog Added Fixed issue #544 preventing containers initialization within sysbox containers when running latest oci-runc releases (1.1.0-rc.1+). Added support to allow CIFS mounts within Sysbox containers (Sysbox-EE only). Fixed issue to allow shiftfs mounts over files that are themselves bind-mounts. Checksum…
Release v0.5.1