OpenShell

mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-16 05:20:22 +08:00

Files

T

History

Drew Newberry 070bcca19c fix(vm): resolve CNI bridge and nftables errors for reliable pod networking

Switch kube-proxy to nftables mode and add missing kernel config options
(NFT_NUMGEN, NFT_FIB_IPV4/6, NFT_LIMIT, NFT_REDIR, NFT_TPROXY) plus
xtables match modules required by CNI bridge masquerade. Add stale CNI
state cleanup on boot (cni0 bridge, veth pairs, IPAM allocations, pod
network namespaces, sandbox controller shim) to prevent 'route already
exists' errors from persistent rootfs. Remove dual bridge/legacy-vm-net
profile system in favor of bridge-only with fail-fast kernel validation.
Drop host-mapped port 6443 (kube-apiserver) since it is not needed for
normal gateway operation. Update bundle script to fall back to Homebrew
for libkrun.dylib (VMM) while still requiring custom libkrunfw (kernel).

2026-03-24 10:22:53 -07:00

bundle-vm-runtime.sh

fix(vm): resolve CNI bridge and nftables errors for reliable pod networking

2026-03-24 10:22:53 -07:00

cluster-bootstrap.sh

refactor: rename navigator- crate prefix to openshell- (#277 )

2026-03-13 02:02:18 -07:00

cluster-deploy-fast.sh

feat(sandbox): log connection attempts that bypass proxy path (#326 )

2026-03-16 00:32:13 -07:00

cluster-push-component.sh

refactor(sandbox): sandboxes are managed as separate community images (#267 )