Commit Graph

11 Commits

Author SHA1 Message Date
Julian Friedman 3fd2530794 Make namespaces match runc
"mount" rather than "mnt", "network" rather than "net"

Signed-off-by: Julian Friedman <julz.friedman@uk.ibm.com>
2015-09-04 19:12:38 +01:00
Alexander Morozov 527a3eec38 Merge pull request #64 from cyphar/add-pids-cgroup
spec: linux: add support for the PIDs cgroup
2015-09-03 21:09:55 -07:00
Aleksa Sarai 834fb5db52 spec: linux: add support for the PIDs cgroup
Add support for the PIDs cgroup as a cgroup resource constraint in the
Linux container specification. Since PIDs are a real resource, we need
to support the ability to limit them.

The PIDs cgroup subsystem is available in Linux 4.3+.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
2015-09-03 17:32:35 +10:00
Lai Jiangshan 004ec5525a Rename the header "Access to devices" to "Devices" to fit with the config
And also fix the header size

Signed-off-by: Lai Jiangshan <jiangshanlai@gmail.com>
2015-09-03 07:12:23 +08:00
W. Trevor King 284f914909 runtime-config: Remove blank lines from the end of files
These snuck in with 7232e4b1 (specs: introduce the concept of a
runtime.json, 2015-07-30, #88) and 73bf1ba8 (JSON objects are easier
to parse/manipulate, 2015-08-27, #120).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-28 22:07:58 -07:00
Brandon Philips 6278334b91 Merge pull request #119 from wking/trailing-whitespace
Remove trailing whitespace
2015-08-27 13:48:56 -07:00
W. Trevor King 9f758db92f runtime-config-linux: One sentence per line for opening two paragraphs
I touched these paragraphs while removing trailing whitespace in the
previous commit.  Since I was touching them in this branch, it seemed
better to rewrap them using the "Markdown style" suggestions in the
README.

I also added a missing period after the namespaces(7) link.

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 15:17:46 -07:00
W. Trevor King a48397b9eb Remove trailing whitespace
With:

  $ sed -i 's/  *$//' *.md *.go

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 15:14:19 -07:00
W. Trevor King 3ed95897c3 runtime-config-linux: Drop 'Linux' from headers
The fact that these are Linux-specific entities should be obvious from
the context (this whole file is only about Linux-specific entities).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 13:32:27 -07:00
W. Trevor King 2854504cf7 bundle: Move 'Linux sysctl' header to its own line
This fixes a copy/paste issue with 7232e4b1 (specs: introduce the
concept of a runtime.json, 2015-07-30, #88).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 13:31:29 -07:00
Brandon Philips 7232e4b137 specs: introduce the concept of a runtime.json
Based on our discussion in-person yesterday it seems necessary to
separate the concept of runtime configuration from application
configuration. There are a few motivators:

- To support runtime updates of things like cgroups, rlimits, etc we
  should separate things that are inherently runtime specific from
  things that are static to the application running in the container.

- To support the goal of being able to move a bundle between hosts we
  should make it clear what parts of the spec are and are not portable
  between hosts so that upon landing on a new host the non-portable
  options may be rewritten or removed.

- In order to attach a cryptographic identity to a bundle we must not
  include details in the bundle that are host specific.
2015-08-26 09:44:09 -07:00