Skip to content

gVisor sandboxes move to release 20261019.0 from the 2026-10-17 nightly - #3177

Merged
Dmitry Berkovich (dberkov) merged 2 commits into
agent-substrate:mainfrom
dims:gvisor-release-20261019
Oct 23, 2026
Merged

Dmitry Berkovich (dberkov) merged 2 commits into
agent-substrate:mainfrom
dims:gvisor-release-20261019

Conversation

@dims

@dims Davanum Srinivas (dims) commented Oct 23, 2026 •

Copy link
Copy Markdown
Collaborator

The shipped gVisor config pinned the 2026-10-17 nightly for google/gvisor@b79256080dec, which saves and restores multiple filesystem checkpoint bundles. Release 20261019.0 is the first tagged release that contains it, so the config can point at a release again.

Change. manifests/ate-install/sandboxconfig-gvisor.yaml replaces v4 with v5, release 20261019.0 for amd64 and arm64, as defaultVersion, the way the previous bumps did. docs/api-guide.md mirrors it. The sha256 values come from the downloaded tarballs, which match the published .sha512 files.

Breaking change. A MEMORY snapshot taken under v4 cold boots on its next resume: it keeps its files and loses its memory state. Recut golden snapshots after upgrading. Please add the breaking-change label.

Tests. go test ./api/infra/k8s/ate/v1/ applies the edited manifest against the CRD and the admission policy; ./cmd/ate-setup/... and ./cmd/atelet/ pass. CI's e2e lanes install this manifest and boot, suspend and restore gVisor actors on it.

AI use: AI-assisted, I reviewed and tested it.

  • Tests pass
  • Docs updated

The 2026-10-17 nightly was pinned for google/gvisor@b79256080dec, the
multiple filesystem checkpoint bundles. Release 20261019.0 is the first
tagged release that carries it. Version v4 stays so a memory snapshot
taken under it still restores.
@dberkov

Copy link
Copy Markdown
Collaborator

nybidari - could you please verify that this is a right version that includes rootfs and no-pause feature

@nybidari

Copy link
Copy Markdown
Collaborator

Yes, this release includes both features.

Every worker fetches every enabled version. A snapshot taken under the
nightly cold boots on its next resume, keeping its files.
@dims

Copy link
Copy Markdown
Collaborator Author

Dmitry Berkovich (@dberkov) nybidari fixed the nit (dropped v4). PTAL

@dims Davanum Srinivas (dims) changed the title gvisor: move the sandbox asset to release 20261019.0 gVisor sandboxes move to release 20261019.0 from the 2026-10-17 nightly Oct 23, 2026
@dberkov
Dmitry Berkovich (dberkov) added this pull request to the merge queue Oct 23, 2026
Merged via the queue into agent-substrate:main with commit 6257ec6 Oct 23, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants