Qiang Huang
bc67941c72
Parse directly in FindCgroupMountpointDir
...
Unify it with FindCgroupMountpoint, and add comments why
we should to do this.
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-09-09 09:28:50 +08:00
Qiang Huang
8f35c181b2
Minor comments fix
...
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-09-07 10:39:22 +08:00
Rajasekaran
57cc442c13
Fixing checkpoint issue
...
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
2015-09-04 16:20:45 +05:30
Mrunal Patel
0f85e4e1a3
Merge pull request #239 from rajasec/restore-leaverunning
...
Restorefixforrunningcontainer
2015-09-02 11:21:30 -07:00
Alexander Morozov
05b1cda5dd
Merge pull request #235 from hqhq/hq_fix_cgroup_test
...
Fix cgroup mount tests
2015-09-01 14:57:44 -07:00
Mrunal Patel
5c92e5d7e0
Merge pull request #232 from vishh/oom-score-adj
...
Adding oom_score_adj as a container config param
2015-08-31 14:45:29 -07:00
Vishnu Kannan
cc232c4707
Adding oom_score_adj as a container config param.
...
Signed-off-by: Vishnu Kannan <vishnuk@google.com>
2015-08-31 14:02:59 -07:00
Rajasekaran
77af09efd6
Restorefixforrunningcontainer
...
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
2015-08-31 22:16:38 +05:30
Mrunal Patel
8447547797
Merge pull request #233 from shishir-a412ed/comment_move
...
cleanup: outdated comment
2015-08-31 09:27:34 -07:00
Qiang Huang
085f465c00
Fix cgroup mount tests
...
I got:
```
exec_test.go:823: Mode expected to contain 'ro,nosuid,nodev,noexec': tmpfs on /sys/fs/cgroup type tmpfs (ro,seclabel,nosuid,nodev,noexec,relatime,mode=755
```wq
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-08-31 11:23:18 +08:00
Qiang Huang
b7385e291c
Always remount for bind mount
...
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-08-31 11:10:34 +08:00
Shishir Mahajan
0f3545e3d3
cleanup: outdated comment
...
Signed-off-by: Shishir Mahajan <shishir.mahajan@redhat.com>
2015-08-29 11:50:39 -04:00
Michael Crosby
b1e7041957
Merge pull request #165 from calavera/context_labels
...
Make label.Relabel safer.
2015-08-28 14:20:00 -07:00
Mrunal Patel
9c1e298b0e
Merge pull request #179 from crosbymichael/debug-log
...
Add --log flag
2015-08-28 13:12:50 -07:00
Mrunal Patel
8b18c9af08
Merge pull request #229 from booyaa/doc_linux_only
...
Add caveat will only build on Linux as per #9
2015-08-28 11:29:07 -07:00
Mrunal Patel
525b3710d8
Merge pull request #231 from shishir-a412ed/socket_activation
...
Systemd integration with runc, for on-demand socket activation
2015-08-28 11:28:46 -07:00
Alexander Morozov
37c506058d
Merge pull request #221 from crosbymichael/defaults-criu
...
Remove hard-coded default for tcp connections
2015-08-28 11:24:36 -07:00
Shishir Mahajan
6b9d64eefe
Systemd integration with runc, for on-demand socket activation
...
Signed-off-by: Shishir Mahajan <shishir.mahajan@redhat.com>
2015-08-28 14:24:01 -04:00
Alexander Morozov
98e6e70cf3
Merge pull request #214 from rajasec/restorefix
...
Restore container cleanup
2015-08-28 10:49:09 -07:00
Michael Crosby
5a3ebbdb1f
Add --debug-log flag
...
Add a `--debug-log` flag for specifying a path to write the debug logs
to for runc.
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-08-28 10:48:52 -07:00
Michael Crosby
5e75a12ec1
Merge pull request #224 from marcosnils/master
...
Update README config file devices
2015-08-28 10:46:09 -07:00
Michael Crosby
b9c32b3869
Merge pull request #223 from rajasec/rlimitspec
...
Adding rlimit in spec
2015-08-28 10:34:59 -07:00
Mrunal Patel
1cb571f800
Merge pull request #228 from mheon/seccomp_config
...
Connect Seccomp configuration in Spec to backend
2015-08-28 10:32:42 -07:00
Mrunal Patel
7797873f1b
Merge pull request #230 from shishir-a412ed/error_check_load_spec
...
Error should be checked after loadSpec
2015-08-27 08:18:47 -07:00
Shishir Mahajan
432dcede36
Error should be checked after loadSpec
...
Signed-off-by: Shishir Mahajan <shishir.mahajan@redhat.com>
2015-08-27 11:03:43 -04:00
Mark Sta Ana
a491b93ff3
Add caveat will only build on Linux as per #9
...
Signed-off-by: Mark Sta Ana <booyaabooyaabooyaa@gmail.com>
2015-08-27 08:50:46 +01:00
Matthew Heon
2ee6d1e8b6
Connect Seccomp configuration in Spec to configuration in Libcontainer
...
Signed-off-by: Matthew Heon <mheon@redhat.com>
2015-08-25 17:35:06 -04:00
Mrunal Patel
7291a52148
Merge pull request #210 from duglin/AddExecCmd
...
Add a 'start' command
2015-08-25 08:21:23 -07:00
Mrunal Patel
2f4c229a8c
Merge pull request #215 from boucher/huikang-patch
...
Add hooks for passing explicit veth pairs for forwarding to CRIU
2015-08-24 21:23:29 -07:00
Rajasekaran
fc97aa44e1
Updating README for rlimit
...
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
Fixing indentation issue in README
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
2015-08-25 06:02:59 +05:30
Hui Kang
7f23085c82
Add hooks for passing explicit veth pairs for forwarding to CRIU.
...
Signed-off-by: Hui Kang <hkang.sunysb@gmail.com>
2015-08-24 09:26:39 -07:00
Rajasekaran
ab4b825f8c
Adding rlimit in spec
...
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
Removing return type
Signed-off-by: Rajasekaran <rajasec79@gmail.com>
2015-08-24 21:33:36 +05:30
Mrunal Patel
ca2f4925c9
Merge pull request #219 from boucher/criu-logs
...
Add the criu log file path to the failure message.
2015-08-24 08:21:24 -07:00
Marcos Lilljedahl
241306b95c
Update README config file devices
...
Signed-off-by: Marcos Lilljedahl <marcosnils@gmail.com>
2015-08-23 12:52:50 -03:00
Michael Crosby
ba56afde7b
Remove hard-coded default for tcp connections
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-08-21 15:59:43 -07:00
Doug Davis
714ae2acc9
Add a 'start' command
...
When any non-global-flag parameter appears on the command line make sure
there's a "command" even in the 'start' (run) case to ensure its not
ambiguous as to what the arg is. For example, w/o this fix its not
clear if
runc foo
means 'foo' is the name of a config file or an unknown command. Or worse,
you can't name a config file the same a ANY command, even future (yet to
be created) commands.
We should fix this now before we ship 1.0 and are forced to support this
ambiguous case for a long time.
Signed-off-by: Doug Davis <dug@us.ibm.com>
2015-08-21 15:26:34 -07:00
boucher
8c812d0f50
Add the criu log file path to the failure message.
...
Signed-off-by: Ross Boucher <rboucher@gmail.com>
2015-08-21 14:20:59 -07:00
Mrunal Patel
e7663a673e
Merge pull request #70 from mheon/seccomp
...
Convert Seccomp support to use Libseccomp
2015-08-21 12:25:33 -07:00
Mrunal Patel
6d0f60bb94
Merge pull request #205 from tonistiigi/exec
...
Add exec command
2015-08-21 10:45:28 -07:00
Mrunal Patel
90e6d3763e
Merge pull request #212 from laijs/cleanup
...
Simple Cleanups
2015-08-19 20:16:21 -07:00
Mrunal Patel
e98d8e8ae2
Merge pull request #213 from laijs/error-message
...
richer information error message for terminal
2015-08-19 20:15:19 -07:00
Lai Jiangshan
29ced936a6
richer information error message for terminal
...
When we use ```cat | runc``` or ```runc /dev/stdin < config.json```,
it will fail and output ```FATA[0000] Container start failed: inappropriate ioctl for device```.
It is hard for the users to find out the reason from the message:
the config.json enables the terminal but the user redirect the stdin
to an non-terminal file.
After this patch, the output will be
```FATA[0000] Container start failed: Failed to set the terminal from the stdin: inappropriate ioctl for device```
So the user can disable the terminal in the config.json.
See the #202
Cc: W. Trevor King <wking@tremily.us> (@wking)
Signed-off-by: Lai Jiangshan <jiangshanlai@gmail.com>
2015-08-20 08:25:40 +08:00
Lai Jiangshan
e48363d777
simplify a variable declaration
...
Signed-off-by: Lai Jiangshan <jiangshanlai@gmail.com>
2015-08-20 08:21:44 +08:00
Tonis Tiigi
47f294d0ed
Add exec command
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2015-08-19 12:01:38 -07:00
Michael Crosby
2b9673deb9
Merge pull request #211 from mrunalp/sec_integration
...
Integrate security settings
2015-08-19 11:52:57 -07:00
rajasec
0c0dedd73c
Restore container cleanup
...
Signed-off-by: rajasec <rajasec79@gmail.com>
2015-08-19 15:00:57 +05:30
Mrunal Patel
31f88daf91
Integrate security settings
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-08-18 20:10:23 -04:00
Mrunal Patel
d6ae10ada4
Merge pull request #193 from tonistiigi/update-device-specs
...
Update device specs
2015-08-18 14:30:54 -07:00
Mrunal Patel
ca8831fa75
Merge pull request #183 from rajasec/securityfs
...
Adding securityfs mount
2015-08-18 14:24:38 -07:00
Mrunal Patel
c20bda3f71
Merge pull request #206 from mountkin/ensure-cleanup
...
Ensure the cleanup jobs in the deferrer are executed on error
2015-08-18 14:16:31 -07:00