Repository navigation
4.0.2
Highlights
- Added real user-namespace ID mapping paths, including procfs map files and UID/GID translation needed by container runtimes.
- Improved PID and IPC namespace visibility through
/proc, including namespace-file access required bydocker exec. - Added a vendored overlayfs implementation adapted across Android GKI kernels from 5.10 through 6.12.
- Improved namespace cleanup and container reboot routing, and fixed multiple module-load, CFI, IPC-lifecycle, and cross-KMI compatibility issues.
Compatibility
Release assets are available for arm64 Android GKI KMIs: android12-5.10, android13-5.10, android13-5.15, android14-5.15, android14-6.1, android15-6.6, and android16-6.12. Load only the module built for the device’s exact KMI. Network namespace isolation is not provided; use host networking. Overlay mounts may fail on casefold-capable backing filesystems.
Changes
feature:
- Add user-namespace ID mapping and improve PID/IPC namespace access for container runtimes.
- Vendor overlayfs with compatibility support across the seven release-build KMIs.
fix:
- Fix namespace and IPC teardown issues, container reboot routing, and several KMI-specific load/runtime failures.
docs:
- Document overlayfs backing-filesystem limitations and the supported behavior of namespace/procfs paths.
chore:
- Expand per-KMI build and QEMU testing; improve the QEMU harness’s USB-device readiness and container tests.