macOS: a VM's phys_footprint counts guest pages written by the VMM twice
#939
virtio-fs: any open() drops the guest page cache of the file, including pages other processes have mapped (CachePolicy::Auto)
#938
macOS/HVF: anonymous guest RAM is counted twice in phys_footprint after host and guest access
#934
TSI UDP: recvfrom()/recvmsg() on an unconnected socket reports the last sendto() destination, not the real sender
#929
TSI: a listener closed while a thread is blocked in accept() is not released; a new listener on the same port mostly loses its connections
1
#926
TSI: a blocking recv()/read()/accept() blocks send(), shutdown() and getpeername() on the same socket from other threads (hangs Java ServerSocket.close(), stalls WebSocket clients)
2
#924
virtiofs root: small-file metadata 10-30x slower than tmpfs and writes are write-through (1 request queue, 1 worker thread, writeback=false)
1
#913
Apply OCI security settings to the guest workload
#911
main (post-#886) GPU+FFI build fails on macOS: virglrenderer-krun missing virgl_renderer_resource_map_fixed (needs virglrenderer >= 1.3.0)
1
#910
All virtiofs shares return ECONNREFUSED in the guest (macOS host, libkrun 1.19.6 + krunkit 1.3.2)
5
#906
RISC-V device-tree in non-conformant with Linux device-tree schema
#905
init: optional vsock exec server so OCI runtimes can implement exec and signal delivery
2
#895
Incomplete description of building examples
2
#892
Guest reboot and power-off both exit 0, so callers can't tell them apart
3
#890
Guest UID/GID handling since 1.19.5 prevents privileged guest bootstrap
8
#888
virtio-fs (macOS): a file the host replaces via `rename()` reads as ENOENT in the guest for up to `entry_timeout` (5s)
#882
Some keys are not mapped correctly
#860
TSI: impersonated INET sockets always get SO_REUSEPORT, so a second VM's `listen()` silently shares the host port
2
#849
Rootless Container Image Unpacking Fails With EACCESS
#841
unexpected dgram pkt: 3 errors with qemu-guest-agent on vsock
#832
[aarch64][virtio-gpu] KVM_RUN returns EFAULT when running games with Venus
2
#819
TSI: accept() holds the socket lock across the blocking vsock round-trip — concurrent getsockname() on the listening socket never returns
2
#818
TSI: bind(port 0) + listen() lands the VMM proxy on a different ephemeral port than the guest — ephemeral listeners unreachable
3
#809
Guest networking randomly breaks after a few hours
