Qiang Huang
9d6ce7168a
Merge pull request #434 from mrunalp/resources
...
Move the cgroups setting into a Resources struct
2015-12-17 09:34:29 +08:00
Mrunal Patel
55a49f2110
Move the cgroups setting into a Resources struct
...
This allows us to distinguish cases where a container
needs to just join the paths or also additionally
set cgroups settings. This will help in implementing
cgroupsPath support in the spec.
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-12-16 15:53:31 -05:00
Alexander Morozov
ac448818e5
Merge pull request #439 from ZJU-SEL/update-version
...
update version for release 0.0.6
2015-12-16 08:37:34 -08:00
xlgao-zju
3ff8e80662
update version for release 0.0.6
...
Signed-off-by: xlgao-zju <xlgao@zju.edu.cn>
2015-12-16 23:25:19 +08:00
Alexander Morozov
ba1568de39
Merge pull request #436 from calavera/linux_process
...
Move linux only Process.InitializeIO behind the linux build flag.
2015-12-15 14:21:50 -08:00
David Calavera
77c36f4b34
Move linux only Process.InitializeIO behind the linux build flag.
...
Signed-off-by: David Calavera <david.calavera@gmail.com>
2015-12-15 15:12:29 -05:00
Mrunal Patel
334b935833
Merge pull request #435 from calavera/use_go_units
...
Replace docker units package with new docker/go-units.
2015-12-15 09:34:00 -08:00
David Calavera
977991d36f
Replace docker units package with new docker/go-units.
...
It's the same library but it won't live in docker/docker anymore.
Signed-off-by: David Calavera <david.calavera@gmail.com>
2015-12-14 20:45:30 -05:00
Mrunal Patel
11f8fdca33
Merge pull request #430 from crosbymichael/pipes
...
Move STDIO initialization to libcontainer.Process
2015-12-11 14:30:42 -08:00
Alexander Morozov
cb04f03854
Merge pull request #336 from hqhq/hq_parent_cgroup_systemd
...
systemd: support cgroup parent with specified slice
2015-12-11 10:13:47 -08:00
Mrunal Patel
6672d63ec7
Merge pull request #432 from ZJU-SEL/fix-exist
...
fix minor typo
2015-12-11 10:08:07 -08:00
Mrunal Patel
d29479b4f9
Merge pull request #431 from hqhq/fix_readme_v1_time
...
Remove the timeframe for v1 spec
2015-12-11 10:06:33 -08:00
xlgao-zju
ff29daafc0
fix minor typo
...
Signed-off-by: xlgao-zju <xlgao@zju.edu.cn>
2015-12-11 21:37:32 +08:00
Qiang Huang
bf00d9c367
Remove the timeframe for v1 spec
...
Fixes : #429
We missed the former one and haven't got a new one, remove
it from README to avoid confusing.
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-12-11 09:11:17 +08:00
Michael Crosby
29b139f702
Move STDIO initialization to libcontainer.Process
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-12-10 16:11:49 -08:00
Mrunal Patel
0267ad05b0
Merge pull request #340 from dqminh/replace-env-netlink
...
nsexec: replace usage of environment variable with netlink message
2015-12-09 14:21:45 -08:00
Alexander Morozov
39b80c46bc
Merge pull request #428 from crosbymichael/console
...
Export console New func
2015-12-09 12:35:31 -08:00
Michael Crosby
9c9aac5385
Export console New func
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-12-09 11:59:10 -08:00
Daniel, Dao Quang Minh
7d423cb7a1
setns: replace env with netlink for bootstrap data
...
replace passing of pid and console path via environment variable with passing
them with netlink message via an established pipe.
this change requires us to set _LIBCONTAINER_INITTYPE and
_LIBCONTAINER_INITPIPE as the env environment of the bootstrap process as we
only send the bootstrap data for setns process right now. When init and setns
bootstrap process are unified (i.e., init use nsexec instead of Go to clone new
process), we can remove _LIBCONTAINER_INITTYPE.
Note:
- we read nlmsghdr first before reading the content so we can get the total
length of the payload and allocate buffer properly instead of allocating
one large buffer.
- check read bytes vs the wanted number. It's an error if we failed to read
the desired number of bytes from the pipe into the buffer.
Signed-off-by: Daniel, Dao Quang Minh <dqminh89@gmail.com>
2015-12-03 18:03:48 +00:00
Qiang Huang
7695a0ddb0
systemd: support cgroup parent with specified slice
...
Pick up #119
Fixes : docker/docker#16681
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-12-02 23:57:02 -05:00
Mrunal Patel
3317785f56
Merge pull request #420 from runcom/cgroups-unsupported
...
libcontainer: configs: create cgroup_unsupported.go in order to build on darwin as well
2015-11-30 09:20:23 -08:00
Alexander Morozov
decba54d78
Merge pull request #424 from runcom/fix-go-vet
...
libcontainer: network_linux.go: fix go vet
2015-11-30 09:06:41 -08:00
Mrunal Patel
e12572b900
Merge pull request #423 from rajasec/xattr-testfix
...
Fixing xattr test step issue
2015-11-30 08:48:15 -08:00
Antonio Murdaca
3029587085
libcontainer: network_linux.go: fix go vet
...
This patch fixes the following go vet warnings:
```
libcontainer/network_linux.go:96: github.com/vishvananda/netlink.Device
composite literal uses unkeyed fields
libcontainer/network_linux.go:114: github.com/vishvananda/netlink.Device
composite literal uses unkeyed fields
```
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2015-11-30 12:31:18 +01:00
Rajasekaran
49ff2711e1
Fixing xattr test step issue
...
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
2015-11-29 09:24:42 +05:30
Antonio Murdaca
112493115f
libcontainer: configs: create cgroup_unsupported.go in order to build on darwin as well
...
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2015-11-27 10:28:29 +01:00
Mrunal Patel
36015470c2
Merge pull request #371 from hqhq/hq_fix_readme
...
README.md: clarify OCI JSON files
2015-11-24 15:00:36 -08:00
Mrunal Patel
c117a14117
Merge pull request #415 from rajasec/events-usage
...
Fixing minor typo in usage
2015-11-24 14:55:32 -08:00
rajasec
de9b496b2d
Fixing minor typo in usage
...
Signed-off-by: rajasec <rajasec79@gmail.com>
2015-11-23 23:10:32 +05:30
Mrunal Patel
1d3c6581a6
Merge pull request #411 from rajasec/apparmor-changes
...
Adding error conditions when apparmor disabled
2015-11-23 09:40:13 -08:00
Daniel, Dao Quang Minh
d914bf7347
setns: add bootstrap data
...
add bootstrap data to setns process. If we have any bootstrap data then copy it
to the bootstrap process (i.e. nsexec) using the sync pipe. This will allow us
to eventually replace environment variable usage with more structured data
to setup namespaces, write pid/gid map, setgroup etc.
Signed-off-by: Daniel, Dao Quang Minh <dqminh89@gmail.com>
2015-11-22 11:36:58 +00:00
rajasec
949d822675
Adding error conditions when apparmor disabled
...
Signed-off-by: rajasec <rajasec79@gmail.com>
Add the changes to errors in lower case
Signed-off-by: rajasec <rajasec79@gmail.com>
2015-11-22 13:14:18 +05:30
Alexander Morozov
97bc9a7faf
Merge pull request #410 from tianon/bump-version
...
Bump version constant to 0.0.5 in preparation for a new release
2015-11-20 13:45:55 -08:00
Tianon Gravi
e001f947d7
Bump version constant to 0.0.5 in preparation for a new release
...
Signed-off-by: Andrew "Tianon" Page <admwiggin@gmail.com>
2015-11-20 13:42:42 -08:00
Mrunal Patel
56d4e8eb3e
Merge pull request #408 from runcom/update-go-systemd
...
godeps: update go-systemd to v4 and godbus/dbus to v3
2015-11-19 14:50:20 -08:00
Antonio Murdaca
bea558b61f
godeps: update go-systemd to v4 and godbus/dbus to v3
...
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2015-11-19 23:37:28 +01:00
Alexander Morozov
eccc69e64a
Merge pull request #407 from runcom/unsupported
...
libcontainer: configs: extend unsupported os
2015-11-19 13:53:34 -08:00
Antonio Murdaca
400e05fe5b
libcontainer: configs: extend unsupported os
...
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2015-11-19 18:24:34 +01:00
Alexander Morozov
776791463d
Merge pull request #357 from ashahab-altiscale/350-container-in-container
...
Bind mount device nodes on EPERM
2015-11-16 14:54:02 -08:00
Mrunal Patel
b28ec60b0e
Merge pull request #373 from mikebrow/bundle-dir-310
...
adding support for --bundle
2015-11-16 12:07:01 -08:00
Mrunal Patel
7d9a6699f7
Merge pull request #401 from jfrazelle/i-have-this-thing-for-static-binaries
...
static binary \o/
2015-11-16 11:39:30 -08:00
Alexander Morozov
476e467fc0
Merge pull request #403 from hqhq/hq_fix_comments
...
Fix comment to be consistent with the code
2015-11-16 10:49:18 -08:00
Qiang Huang
96f0eefa1a
Fix comment to be consistent with the code
...
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-11-16 19:16:27 +08:00
Abin Shahab
28c9d0252c
Userns container in containers
...
Enables launching userns containers by catching EPERM errors for writing
to devices cgroups, and for mknod invocations.
Signed-off-by: Abin Shahab <ashahab@altiscale.com>
2015-11-15 14:42:35 -08:00
Jessica Frazelle
ecd6463101
static binary \o/
...
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-11-14 16:33:52 -08:00
Alexander Morozov
48fdc50d09
Merge pull request #398 from crosbymichael/seccomp-trace
...
Add seccomp trace support
2015-11-13 10:54:18 -08:00
Alexander Morozov
bda4ca2f8f
Merge pull request #388 from hqhq/hq_cgroup_cleanups
...
Some cgroup cleanups
2015-11-13 09:06:18 -08:00
Mike Brown
8b19581694
adding support for --bundle -b to start, restore, and spec; fixes issue #310
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2015-11-13 09:13:57 -06:00
Michael Crosby
caca840972
Add seccomp trace support
...
Closes #347
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-11-12 17:03:53 -08:00
Alexander Morozov
1df35060e4
Merge pull request #391 from mrunalp/exec_validate
...
Validate process configuration for runc exec
2015-11-12 16:35:44 -08:00