Mrunal Patel
859abee0c8
Add CAP prefix for capabilities
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-09-15 14:43:03 -04:00
David Calavera
0f28592b35
Turn hook pointers into values.
...
Signed-off-by: David Calavera <david.calavera@gmail.com>
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-09-11 11:34:34 -07:00
Michael Crosby
dd969cbacd
Add test for function based hooks
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-09-10 18:15:00 -07:00
Mrunal Patel
1dca365393
Add test for prestart hook
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
Conflicts:
libcontainer/integration/exec_test.go
2015-09-10 17:59:36 -07:00
Alexander Morozov
05b1cda5dd
Merge pull request #235 from hqhq/hq_fix_cgroup_test
...
Fix cgroup mount tests
2015-09-01 14:57:44 -07:00
Vishnu Kannan
cc232c4707
Adding oom_score_adj as a container config param.
...
Signed-off-by: Vishnu Kannan <vishnuk@google.com>
2015-08-31 14:02:59 -07:00
Qiang Huang
085f465c00
Fix cgroup mount tests
...
I got:
```
exec_test.go:823: Mode expected to contain 'ro,nosuid,nodev,noexec': tmpfs on /sys/fs/cgroup type tmpfs (ro,seclabel,nosuid,nodev,noexec,relatime,mode=755
```wq
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-08-31 11:23:18 +08:00
Matthew Heon
2ae581ae62
Convert Seccomp support to use Libseccomp
...
This removes the existing, native Go seccomp filter generation and replaces it
with Libseccomp. Libseccomp is a C library which provides architecture
independent generation of Seccomp filters for the Linux kernel.
This adds a dependency on v2.2.1 or above of Libseccomp.
Signed-off-by: Matthew Heon <mheon@redhat.com>
2015-08-13 07:56:27 -04:00
Alexander Morozov
1735ad788f
Replace dind with smaller script
...
It just mounts /tmp into tmpfs. We need this because criu tests has
problems on overlayfs.
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-07-30 13:23:26 -07:00
Alexander Morozov
d89964eed3
Remount /sys/fs/cgroup as RO if MS_RDONLY was passed in m.Flags
...
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-07-22 11:05:40 -07:00
Mrunal Patel
5b805276c2
Revert "Remount /sys/fs/cgroup as readonly always"
...
This reverts commit 18de1a273e
.
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-07-17 17:50:46 -04:00
Alexander Morozov
18de1a273e
Remount /sys/fs/cgroup as readonly always
...
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-07-17 12:45:09 -07:00
Alexander Morozov
f6eb19c0d5
Tests for mounting cgroups
...
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-07-15 11:07:03 -07:00
Mrunal Patel
8ea6c65d12
Rename SystemProperties to Sysctl and make it available in the runc config
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-07-06 19:18:08 -04:00
Alexander Morozov
5c56d28043
Fix panic in seccomp test on error
...
It can happen if newContainer is failed. Now test shows real error from
newContainer instead of trace.
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-06-22 19:26:33 -07:00
Michael Crosby
080df7ab88
Update import paths for new repository
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-06-21 19:29:59 -07:00
Michael Crosby
8f97d39dd2
Move libcontainer into subdirectory
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-06-21 19:29:15 -07:00