Affected by GO-2022-0482 and 7 other vulnerabilities

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

The highest tagged major version is v2.

v2

package

v1.5.10 Latest Latest Go to latest Published: Mar 2, 2022 License: Apache-2.0 Imports: 13 Imported by: 53

Details

This section is empty.

View Source

var IDName = "container_id"

IDName is the name that is used to identify the id being collected in the metric

func NewTaskMonitor(ctx context.Context, publisher events.Publisher, ns *metrics.Namespace) (runtime.TaskMonitor, error)

NewTaskMonitor returns a new cgroups monitor

type Collector struct {
	// contains filtered or unexported fields
}

Collector provides the ability to collect container stats and export them in the prometheus format

func NewCollector(ns *metrics.Namespace) *Collector

NewCollector registers the collector with the provided namespace and returns it so that cgroups can be added for collection

func (c *Collector) Add(t Statable) error

Add adds the provided cgroup and id so that metrics are collected and exported

func (c *Collector) Collect(ch chan<- prometheus.Metric)

Collect prometheus metrics

func (c *Collector) Describe(ch chan<- *prometheus.Desc)

Describe prometheus metrics

func (c *Collector) Remove(t Statable)

Remove removes the provided cgroup by id from the collector

func (c *Collector) RemoveAll()

RemoveAll statable items from the collector

type Statable interface {
	ID() string
	Namespace() string
	Stats(context.Context) (*types.Any, error)
}

Statable type that returns cgroup metrics