-
Notifications
You must be signed in to change notification settings - Fork 63
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[WSLc] network.proxy is accepted but only cooperative - no in-container enforcement (blocked on the WSLc SDK)
Area-SDK-PolicySDK policy layerSDK policy layerContainer-WSLCIssues relating to WSL ContainersIssues relating to WSL ContainersIssue-BugSomething isn't workingSomething isn't workingOS-WindowsWindowsWindowsPriority3Moderate issue with limited impact; workaround available, fix as capacity permitsModerate issue with limited impact; workaround available, fix as capacity permitsStatus: Open.#947 In microsoft/mxc;Seatbelt: allowedHosts under defaultPolicy 'block' degrades to allow-all outbound, inverting the requested policy
Area-SDK-PolicySDK policy layerSDK policy layerContainer-ProcessProcess container typeProcess container typeIssue-BugSomething isn't workingSomething isn't workingOS-MacOSmacOSmacOSStatus: Open.#946 In microsoft/mxc;[Bubblewrap/SDK] Schema-0.8 network gate: an absent version disables it, and the Node SDK trips it on a field callers never set
Area-Executor-SchemaExecutor schema definitionsExecutor schema definitionsArea-SDK-ApiSDK API surfaceSDK API surfaceArea-SDK-ConfigurationSDK configuration layerSDK configuration layerIssue-BugSomething isn't workingSomething isn't workingOS-LinuxLinuxLinuxPriority3Moderate issue with limited impact; workaround available, fix as capacity permitsModerate issue with limited impact; workaround available, fix as capacity permitsStatus: Open.#945 In microsoft/mxc;[Seatbelt] network.proxy is enforced on LXC/Bubblewrap-0.8 but only cooperative on macOS Seatbelt
Area-Executor-LXCLinux executor (LXC)Linux executor (LXC)Container-ProcessProcess container typeProcess container typeIssue-BugSomething isn't workingSomething isn't workingOS-LinuxLinuxLinuxOS-MacOSmacOSmacOSPriority3Moderate issue with limited impact; workaround available, fix as capacity permitsModerate issue with limited impact; workaround available, fix as capacity permitsStatus: Open.#937 In microsoft/mxc;[Bubblewrap] Proxy-only egress does not restrict non-IP socket families (AF_VSOCK)
Area-Build-RustRust build systemRust build systemArea-Executor-LXCLinux executor (LXC)Linux executor (LXC)Issue-BugSomething isn't workingSomething isn't workingOS-LinuxLinuxLinuxPriority3Moderate issue with limited impact; workaround available, fix as capacity permitsModerate issue with limited impact; workaround available, fix as capacity permitsStatus: Open.#936 In microsoft/mxc;[Bubblewrap] Proxy-only egress: slirp4netns dying mid-run leaves the sandbox with a broken network and no error
Area-Executor-LXCLinux executor (LXC)Linux executor (LXC)Container-ProcessProcess container typeProcess container typeIssue-BugSomething isn't workingSomething isn't workingOS-LinuxLinuxLinuxPriority2High-impact issue affecting key functionality; workaround exists, fix in next release.High-impact issue affecting key functionality; workaround exists, fix in next release.Status: Open.#935 In microsoft/mxc;New containment backend: macOS hardware isolation via Apple Virtualization.framework (VZ Linux microVM)
Area-Executor-SchemaExecutor schema definitionsExecutor schema definitionsContainer-MicroVMMicroVM container typeMicroVM container typeIssue-FeatureIt's a new feature requestIt's a new feature requestOS-MacOSmacOSmacOSStatus: Open.#927 In microsoft/mxc;In-process SDKs lose the structured failure detail the backend already produces
Area-SDK-ApiSDK API surfaceSDK API surfaceIssue-BugSomething isn't workingSomething isn't workingOS-WindowsWindowsWindowsPriority2High-impact issue affecting key functionality; workaround exists, fix in next release.High-impact issue affecting key functionality; workaround exists, fix in next release.Status: Open.LXC state-aware exec does not apply the cooperative proxy environment
Area-Executor-LXCLinux executor (LXC)Linux executor (LXC)Container-ProcessProcess container typeProcess container typeOS-LinuxLinuxLinuxPriority1Critical bug that has a significant customer, security and reliability.Critical bug that has a significant customer, security and reliability.Status: Open.#921 In microsoft/mxc;LXC returns an exec timeout as a backend error rather than an execution outcome
Area-Executor-LXCLinux executor (LXC)Linux executor (LXC)Container-ProcessProcess container typeProcess container typeOS-LinuxLinuxLinuxPriority2High-impact issue affecting key functionality; workaround exists, fix in next release.High-impact issue affecting key functionality; workaround exists, fix in next release.Status: Open.#920 In microsoft/mxc;remove_forward_hooks reports success for an absent iptables binary
Container-ProcessProcess container typeProcess container typeOS-LinuxLinuxLinuxPriority2High-impact issue affecting key functionality; workaround exists, fix in next release.High-impact issue affecting key functionality; workaround exists, fix in next release.Status: Open.#919 In microsoft/mxc;LXC signal-time teardown strands the FORWARD return-path ACCEPT rules
Area-Executor-LXCLinux executor (LXC)Linux executor (LXC)Container-ProcessProcess container typeProcess container typeOS-LinuxLinuxLinuxPriority2High-impact issue affecting key functionality; workaround exists, fix in next release.High-impact issue affecting key functionality; workaround exists, fix in next release.Status: Open.#918 In microsoft/mxc;