Commit Graph

32 Commits

Author SHA1 Message Date
Vincent Batts 70372d3880 *.md: update TOC and links
Some of the docs were not even linked to, and did not have a logic
outline for their grouping.

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
2015-09-25 11:47:16 -04:00
Vincent Batts 712a7467d1 Merge remote-tracking branch 'origin/pr/163' 2015-09-10 10:07:40 -04:00
Vincent Batts 9a8748cad4 Merge pull request #160 from mrunalp/cap_fix
Modify the capabilities constants to match header files like other constants
2015-09-09 18:59:48 -04:00
Mrunal Patel 663be9d677 Modify the capabilities constants to match header files like other constants
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-09-09 12:43:17 -04:00
Brandon Philips 3848a23819 config-linux: specify the default devices/filesystems available
Fixes #95

Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
2015-09-09 09:36:59 -07:00
Lai Jiangshan 339e038400 Deduplicate the field of RootfsPropagation
There are two RootfsPropagation fields, one is Linux.RootfsPropagation,
the other one is LinuxRuntime.RootfsPropagation. They are duplicated,
one of them should be removed.

The RootfsPropagation is definitely a runtime specific configuration,
so we remove the one of Linux.RootfsPropagation.

And the description of it is moved from config-linux.md to
runtime-config-linux.md.

Signed-off-by: Lai Jiangshan <jiangshanlai@gmail.com>
2015-09-09 23:27:37 +08:00
Vincent Batts 6cab2747d9 *.md: markdown formatting
Closes https://github.com/opencontainers/specs/issues/83

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
2015-09-09 10:17:06 -04:00
Brandon Philips 7232e4b137 specs: introduce the concept of a runtime.json
Based on our discussion in-person yesterday it seems necessary to
separate the concept of runtime configuration from application
configuration. There are a few motivators:

- To support runtime updates of things like cgroups, rlimits, etc we
  should separate things that are inherently runtime specific from
  things that are static to the application running in the container.

- To support the goal of being able to move a bundle between hosts we
  should make it clear what parts of the spec are and are not portable
  between hosts so that upon landing on a new host the non-portable
  options may be rewritten or removed.

- In order to attach a cryptographic identity to a bundle we must not
  include details in the bundle that are host specific.
2015-08-26 09:44:09 -07:00
Tiesheng 45ae53d4db Fix typos in the "Namespace types" section
Signed-off-by: ChengTiesheng <chengtiesheng@huawei.com>
2015-08-20 11:08:40 +08:00
Mrunal Patel af36d746ba Add Apparmor, Selinux and Seccomp sections
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-08-07 14:19:10 -04:00
Alexander Morozov 5273b3d785 Replace Linux.Device with more specific config
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-08-06 10:26:29 -07:00
Michael Crosby 55912bd676 Merge pull request #79 from laijs/json-notation-in-md
specs: add json notation
2015-07-27 09:06:50 -07:00
Lai Jiangshan d485f77fbd specs: fix the description for the [ug]idMappings
The fields in the [ug]idMappings are changed, we should fix
the description correspondingly.

Signed-off-by: Lai Jiangshan <jiangshanlai@gmail.com>
2015-07-26 16:30:59 +08:00
Lai Jiangshan 2e186c62c3 specs: add json notation
Signed-off-by: Lai Jiangshan <jiangshanlai@gmail.com>
2015-07-26 16:27:20 +08:00
Huamin Chen c53bf87ac2 make rootfs mount propagation mode settable
Signed-off-by: Huamin Chen  <hchen@redhat.com>
2015-07-16 08:50:11 -04:00
W. Trevor King 0887300359 spec_linux.go: Rename IDMapping fields to follow syscall.SysProcIDMap
'From' and 'To' are potentially ambiguous for a one-to-one map like
this, and there's already an established name convention in
SysProcIDMap [1].  This commit removes the mental overhead of two
separate naming schemes for the same information.  I'd like to drop
IDMapping entirely in favor of SysProcIDMap, but SysProcIDMap doesn't
give the JSON hints we need for (de)serializing.

[1]: https://golang.org/pkg/syscall/#SysProcIDMap
2015-07-08 10:48:51 -07:00
Michael Crosby e8990d65d1 Merge pull request #50 from mrunalp/userns_section
Adds a section for user namespace mappings
2015-07-08 09:28:18 -07:00
Jonathan Boulle 625798536e config: minor cleanup
- link to official SemVer page
- link between config.md and config-linux.md and explain relationship
- fix typo (arch -> os)
- tweak formatting of some special characters
2015-07-06 17:37:01 -07:00
Mrunal Patel d8237f1899 Adds a section for user namespace mappings
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-07-06 16:05:05 -04:00
Jonathan Boulle 1937c009ea *: small spelling fixes 2015-07-01 10:20:43 -07:00
lizf-os a402b7ae4e Fix typos in the rlimits section
Signed-off-by: Zefan Li <lizefan@huawei.com>
2015-07-01 10:25:46 +08:00
Brandon Philips aa7e14306b Merge pull request #35 from mrunalp/rlimits
Adds section for Linux Rlimits
2015-06-30 16:04:05 -07:00
Mrunal Patel a4df2e4ad5 Adds link to kernel cgroups documentation
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-06-30 18:45:10 -04:00
Mrunal Patel 7f9d7d30bd Adds section for Linux Rlimits
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-06-30 18:35:38 -04:00
Michael Crosby 92b590a760 Add linux spec description
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-06-30 15:19:06 -07:00
Michael Crosby f2569d17b4 Update config-linux for better formatting on values
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-06-30 15:13:30 -07:00
Michael Crosby 377213e01c Merge pull request #29 from mrunalp/linux-sysctl
Adds section for Linux Sysctl.
2015-06-30 14:32:24 -07:00
Mrunal Patel 328aba4468 Adds section for Linux Sysctl.
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-06-30 15:03:16 -04:00
Mrunal Patel 144e9719f5 Makes namespaces description linux specific
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-06-30 15:01:09 -04:00
Michael Crosby 9eb09f9593 Move linux specific options to linux spec
This moves some of the linux specific options like namespaces and
devices to the linux config document.  It also removes processes as an
array and replaces it with a single process.

It adds the "platform" struct for OS and Arch and updates many of the
examples to match the changes.  I also remove some of the redundant
windows examples on the portable spec document because they did not add
any extra value and many values were the same.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-06-29 14:15:33 -07:00
Mrunal Patel d5c2670df6 Adds user namespace to the list of namespaces
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-06-24 21:14:35 -07:00
Brandon Philips 5d2eb180f6 *: re-org the spec
We had an in-person spec discussion, lets separate the spec into some
high-level sections to clarify future discussion.

Crosby agreed to let me merge to master :)
2015-06-24 17:15:48 -07:00