77421139ab
libcontainer/user: add supplementary groups only for non-numeric users
...
Signed-off-by: Valentin Rothberg <vrothberg@suse.com>
2017-05-16 13:54:27 +02:00
c1287819af
Merge pull request #1447 from justincormack/unix-linux
...
Clean up unix vs linux usage
2017-05-12 10:25:45 -07:00
4c67360296
Clean up unix vs linux usage
...
FreeBSD does not support cgroups or namespaces, which the code suggested, and is not supported
in runc anyway right now. So clean up the file naming to use `_linux` where appropriate.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-05-12 17:22:09 +01:00
21ef2e3d12
Merge pull request #1410 from chchliang/statustest
...
add createdState and runningState status testcase
2017-05-12 16:17:17 +08:00
2daa11574b
Merge pull request #1438 from hqhq/fix_rootfs_comments
...
Fix comments about when to pivot_root
2017-05-05 20:15:49 -07:00
96e0df7633
Fix comments about when to pivot_root
...
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2017-05-06 07:59:03 +08:00
d37c558a43
Merge pull request #1433 from avagin/wait_for_container
...
tests: don't call wait_for_container after synchronous operations
2017-05-05 10:40:20 -05:00
7ffea268d3
Merge pull request #1435 from harche/id_regex
...
Issue #1429 : Removing check for id string length
2017-05-04 15:45:02 -05:00
c6fdde7cd1
Merge pull request #1436 from sak0/dev
...
update man page for `runc update`
2017-05-04 10:18:36 -07:00
da49d3a74c
update manpages for `runc update`
...
Signed-off-by: CuiHaozhi <cuihz@wise2c.com>
2017-05-04 07:41:08 -04:00
700c74cb7e
Issue #1429 : Removing check for id string length
...
Signed-off-by: Harshal Patil <harshal.patil@in.ibm.com>
2017-05-04 09:21:29 +05:30
992a5be178
Merge pull request #1428 from harche/dedupe_ns_array
...
Remove redundant declaration of namespace slice
2017-05-03 08:31:27 -07:00
a9e15e7e07
criu: check that stdout, stdin pipes are restore correctly
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-03 00:55:24 +03:00
abd0515816
tests: don't call wait_for_container after synchronous operations
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-02 21:48:07 +03:00
22953c122f
Remove redundant declaraion of namespace slice
...
Signed-off-by: Harshal Patil <harshal.patil@in.ibm.com>
2017-05-02 10:04:57 +05:30
459a17b838
test: check C/R for a container with an external terminal
...
We have two test cases with and without pre-dump. Terminals and
pre-dump features are orthogonal, so we can modify one of these test cases.
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-02 04:48:47 +03:00
73258813d3
cr: set a freezer cgroup for criu
...
A freezer cgroup allows to dump processes faster.
If a user wants to checkpoint a container and its storage,
he has to pause a container, but in this case we need to pass
a path to its freezer cgroup to "criu dump".
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-02 04:48:47 +03:00
fe03957bca
Dockerfile: use CRIU 2.12 for tests
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-02 04:48:47 +03:00
1c43d091a1
checkpoint: add support for containers with terminals
...
CRIU was extended to report about orphaned master pty-s via RPC.
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-02 04:48:47 +03:00
a4fcbfb704
Prepare startContainer() to have more action
...
Currently startContainer() is used to create and to run a container.
In the next patch it will be used to restore a container.
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-01 21:55:57 +03:00
1a8b0aced5
Update criurpc
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-01 21:55:57 +03:00
ffeedc4c62
Update github.com/golang/protobuf
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-01 21:55:57 +03:00
f8ca1926c4
libcontainer: check cpt/rst for containers with userns
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-01 21:45:23 +03:00
d307e85dbb
Print a criu version in a error message
...
Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2017-05-01 21:45:23 +03:00
efb2bc3fb0
Merge pull request #1423 from mlaventure/update-pids-limit
...
Allow updating pids limit
2017-04-28 14:26:12 -07:00
1dc53aa457
merge branch 'pr-1425'
...
LGTMs: @mrunalp @cyphar
Closes #1425
2017-04-29 06:25:14 +10:00
1e7e276aff
Allow updating container pids limit
...
Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
2017-04-28 06:44:44 -07:00
c8452121d5
Merge pull request #1418 from harche/optimized_loop
...
Optimizing looping over namespaces
2017-04-27 13:15:57 -07:00
184f094ac0
Add a rootless section to "spec" man page and command help
...
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
2017-04-27 10:54:33 -03:00
c44d4fa6ed
Optimizing looping over namespaces
...
Signed-off-by: Harshal Patil <harshal.patil@in.ibm.com>
2017-04-26 11:54:43 +05:30
b6b70e5345
Merge pull request #1408 from cyphar/vndr-cleanup-config
...
vendor: clean up to be better written
2017-04-25 14:59:14 -07:00
94cfb7955b
Merge pull request #1387 from avagin/freezer
...
Don't try to read freezer.state from the current directory
2017-04-24 20:02:45 -05:00
d9807ae420
vendor: clean up to be better written
...
vndr doesn't support non-top-level imports, and in addition we really
should be using tagged releases far more than we currently are
(*especially* when it come to the OCI specs).
Signed-off-by: Aleksa Sarai <asarai@suse.de>
2017-04-25 10:46:48 +10:00
3568eaa6f0
Merge pull request #1412 from tpot/properties-spelling-fix
...
Fix misspelling of "properties" in various places
2017-04-24 10:05:23 -07:00
e62817fefc
Merge pull request #1414 from jwendell/1413
...
Update examples on README to allow rootless execution
2017-04-21 17:33:05 -07:00
d8477f9b02
Add a rootless containers section on README
...
Closes #1413 .
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
2017-04-21 21:19:07 -03:00
9458b39ca9
Fix misspelling of "properties" in various places
...
Signed-off-by: Tim Potter <tpot@hpe.com>
2017-04-21 13:29:58 +10:00
4f0e6c4ef0
add createdState and runningState status testcase
...
Signed-off-by: chchliang <chen.chuanliang@zte.com.cn>
2017-04-19 16:28:03 +08:00
9f1ef73ef9
Merge pull request #1402 from chchliang/generictest
...
add testcase in generic_error_test.go
2017-04-18 11:42:24 +01:00
a23d7c2eab
add testcase in generic_error_test.go
...
Signed-off-by: chchliang <chen.chuanliang@zte.com.cn>
2017-04-18 08:56:02 +08:00
97db1eaad9
Merge pull request #1396 from harche/cstate
...
Set container state only once during start
2017-04-17 11:32:42 -07:00
13a8c5d140
Merge pull request #1365 from hqhq/use_go_selinux
...
Use opencontainers/selinux package
2017-04-15 14:22:32 +01:00
7947d0689b
Merge pull request #1406 from crosbymichael/install-location
...
Revert back to using /sbin
2017-04-14 16:09:49 -07:00
4c3584145f
Revert back to using /sbin
...
This was changed in
https://github.com/opencontainers/runc/commit/d2f49696#diff-b67911656ef5d18c4ae36cb6741b7965R7
and is causing install problems for people building runc and having it
installed in /bin and /sbin.
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2017-04-14 10:15:33 -07:00
7814a0d14b
Merge pull request #1399 from avagin/cr-cgroup
...
restore: apply resource limits
2017-04-13 11:28:28 -07:00
f8ce01dbdc
Merge pull request #1371 from adrianreber/master
...
checkpoint: check if system supports pre-dumping
2017-04-12 10:08:02 -07:00
50401b5b4c
Merge pull request #1400 from sak0/dev
...
could load a stopped container.
2017-04-10 11:17:24 +08:00
248c586500
could load a stopped container.
...
Signed-off-by: CuiHaozhi <cuihz@wise2c.com>
2017-04-07 07:39:41 -04:00
57ef30a2ae
restore: apply resource limits
...
When C/R was implemented, it was enough to call manager.Set to apply
limits and to move a task. Now .Set() and .Apply() have to be called
separately.
Fixes: 8a740d5391
2017-04-07 02:47:43 +03:00
ac50e77bbb
Merge pull request #1398 from clnperez/console-fix
...
Fix console syscalls
2017-04-06 15:50:16 -07:00
Valentin Rothberg
Michael Crosby
Justin Cormack
Qiang Huang
Daniel, Dao Quang Minh
CuiHaozhi
Harshal Patil
Mrunal Patel
Andrei Vagin
Aleksa Sarai
Kenfe-Mickael Laventure
Jonh Wendell
Tim Potter
chchliang