gVisor release 20260817.0
Binaries are also available from the apt repository and the release bucket;
see Installation.
Changes since release-20260810.0
Nftables: Support xt_MASQUERADE compatibility target. (50e1502a9)
Support NVIDIA IMEX-615.62 in gVisor. (0a5339d1e)
Document ProcessTracker in the scsdk README. (39645c13d)
Fix TOCTOU MSG_PEEK bug in endpoint read methods. (96112bd75)
seccheck: Trace sibling pipe processes in a client lib (5e247d5f6)
Spawn subprocesses in target cgroup with `clone3(CLONE_INTO_CGROUP)`. (f737bb92f)
Internal change. (cd3e8fa42)
Support combined restore of full snapshot and filesystem snapshot. (375fa1be4)
Add rootless Podman in gVisor integration tests. (3998d9281)
Add support for custom mounts in Python SandboxExec. (9b39e1ac1)
Internal change. (5b9f73852)
Support checkpoint and restore to have separate pages for filesystem. (860e747b8)
Update gvisor security track record. (6eb23c9d4)
Implement a new generic proxy for RDMA devices that don't require a plugin. (863a49d87)
Implement the RDMA netlink protocol for device discovery. (ff02bc5c5)
Fix reference counting bug in MmapPreciseFile. (8e9789caa)
Remove s/r for posix_acl tests, they are timing out. (abe7f4ad0)
Nftables: Support xt_conntrack compatibility match. (373368b0d)
docker_image_test: Add logs to help debug the failure. (3546b4003)
Nftables: Support xt_addrtype match. (35769a56f)
Nftables: Added xt-compat framework. (dafd57baf)
Add support for custom working directory in Python SandboxExec. (887974125)
fsimpl/erofs: read regular file data from the image FD on FUSE (58028fc45)
debian: include runsc package changelog (fcae9399a)
Preallocate host kernel FD table before Sentry boot. (0bb1666bb)
Make every user of a tty also refcount (3434348e5)
mm: implement MAP_FIXED_NOREPLACE (a10e246e7)
Move fscheckpoint manifest from json to proto. (8bd698e1e)
Convert memoryFileSaved to MemoryFileMetadataProto. (6acfb4158)
seccheck: Add unit tests for fdReader (7f8916661)
nvproxy: add control commands used by Nsight Compute (0904ed11d)
mm: implement copy-on-fork for pinned pages (5032ac926)
`runsc boot`: Add startup timer instrumentation. (5c6c63e02)
nvproxy: return realistic sets from PopularCapabilitySets() (519cbb67d)
Create /dev/char and /dev/block symlinks in devtmpfs (02c1636b7)
Add CUDA GPU coredump support to nvproxy (b31f31ed5)
Adds missing NVIDIA video engine classes (92c76c27d)
Adds support for NVIDIA driver 610.57.04 (5f3130853)
tcp: prevent CUBIC ACKs from reducing cwnd (5f8c66e26)
overlayfs: implement POSIX ACLs Implements POSIX ACLs for gVisor's overlayfs. (ad74f20bc)
website: fix parenthetical periods on users page (313a4f57e)
Full changelog: release-20260810.0...release-20260817.0