Commit Graph

191 Commits

Author SHA1 Message Date
Brandon Philips 4459fb5ed6 Merge pull request #131 from crosbymichael/maintainers
Add MAINTAINERS file
2015-08-31 14:25:20 -07:00
Alexander Morozov cc8a99757d Fix LinuxRuntime field
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-08-31 14:06:28 -07:00
Michael Crosby c74da17e61 Add MAINTAINERS file
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2015-08-31 13:51:55 -07:00
Mrunal Patel e9cb5644fa Merge pull request #124 from wking/example-additional-gids
config: Add example additionalGids
2015-08-29 13:14:52 -07:00
Brandon Philips d9a5bf2d0d Merge pull request #125 from wking/example-cwd
config: Add example cwd
2015-08-29 09:33:47 -07:00
Brandon Philips 4e4f34ab96 Merge pull request #122 from wking/trailing-blank-lines
runtime-config: Remove blank lines from the end of files
2015-08-29 09:32:00 -07:00
Brandon Philips e3ee431f39 Merge branch 'linux_fds' 2015-08-29 08:34:38 -07:00
Mrunal Patel bd792ea559 Add fd section for linux container process
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-08-29 08:33:46 -07:00
Brandon Philips 7c5c02ad48 Merge pull request #121 from wking/linux-runtime-spec-comment-typo
runtime_config_linux: Fix 'LinuxSpec' -> 'LinuxRuntimeSpec' in comment
2015-08-29 08:31:42 -07:00
W. Trevor King 10aa5f20c5 config: Add example cwd
The field is optional, but it's nice to have at least one example of
it in use.

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-28 22:19:26 -07:00
W. Trevor King 3f4125c3de config: Add example additionalGids
The field is optional, but it's nice to have at least one example of
it in use.  The GIDs I've chosen are currently "tty" and "disk" on
Gentoo (1 is "bin"), which may be remotely reasonable choices, but the
values we're using don't really matter without an example filesystem
to provide context.

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-28 22:17:36 -07:00
W. Trevor King 284f914909 runtime-config: Remove blank lines from the end of files
These snuck in with 7232e4b1 (specs: introduce the concept of a
runtime.json, 2015-07-30, #88) and 73bf1ba8 (JSON objects are easier
to parse/manipulate, 2015-08-27, #120).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-28 22:07:58 -07:00
W. Trevor King d9f623da6d runtime_config_linux: Fix 'LinuxSpec' -> 'LinuxRuntimeSpec' in comment
Fix a copy-paste error from 7232e4b1 (specs: introduce the concept of
a runtime.json, #88).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-28 21:26:49 -07:00
Michael Crosby 6a5a445465 Merge pull request #116 from wking/bluejeans-meetings
README: Document BlueJeans for meetings
2015-08-28 11:06:35 -07:00
Vincent Batts b4af7801d8 Merge pull request #120 from timthelion/patch-1
JSON objects are easier to parse/manipulate
2015-08-28 14:00:08 -04:00
Brandon Philips 6278334b91 Merge pull request #119 from wking/trailing-whitespace
Remove trailing whitespace
2015-08-27 13:48:56 -07:00
Timothy Hobbs 73bf1ba833
JSON objects are easier to parse/manipulate
Don't use strings when you can use dictionaries/objects. JSON objects are trivial to parse and manipulate, unlike strings. String parsing is the #1 cause of security bugs, so if it can be trivially avoided, then why not ;)
2015-08-27 22:19:27 +02:00
Alexander Morozov d5812139b3 Merge pull request #117 from wking/runtime-headings
runtime-config-linux: Minor header cleanups after #88
2015-08-26 18:01:28 -07:00
W. Trevor King 4cc06a6a8b README: Document BlueJeans and wiki archive for meetings
In #opencontainers after today's meeting, here's the source for the
change from Google Hangouts to BlueJeans:

12:01 < wking> Is the BlueJeans approach going to be our standard
  procedure?  If so, I can file a PR updating our weekly-meeting docs
  (which still talk about YouTube and Google Hangouts)
12:03 < mrunalp> wking: Yeah, I think so.
12:04 < wking> ok.  And it's just going to "push the BlueJeans link to
  IRC and the list before the meeting"?  Or does BlueJeans have stable
  channel URLs or similar?
12:05 < mrunalp> wking: The URL that we used today is stable.

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 15:22:32 -07:00
W. Trevor King 9f758db92f runtime-config-linux: One sentence per line for opening two paragraphs
I touched these paragraphs while removing trailing whitespace in the
previous commit.  Since I was touching them in this branch, it seemed
better to rewrap them using the "Markdown style" suggestions in the
README.

I also added a missing period after the namespaces(7) link.

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 15:17:46 -07:00
W. Trevor King a48397b9eb Remove trailing whitespace
With:

  $ sed -i 's/  *$//' *.md *.go

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 15:14:19 -07:00
W. Trevor King 3ed95897c3 runtime-config-linux: Drop 'Linux' from headers
The fact that these are Linux-specific entities should be obvious from
the context (this whole file is only about Linux-specific entities).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 13:32:27 -07:00
W. Trevor King 2854504cf7 bundle: Move 'Linux sysctl' header to its own line
This fixes a copy/paste issue with 7232e4b1 (specs: introduce the
concept of a runtime.json, 2015-07-30, #88).

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-26 13:31:29 -07:00
Mrunal Patel 94c18037fb Merge pull request #88 from philips/runtime-vs-app-config
specs: introduce the concept of a runtime.json
2015-08-26 10:55:22 -07:00
Brandon Philips 7232e4b137 specs: introduce the concept of a runtime.json
Based on our discussion in-person yesterday it seems necessary to
separate the concept of runtime configuration from application
configuration. There are a few motivators:

- To support runtime updates of things like cgroups, rlimits, etc we
  should separate things that are inherently runtime specific from
  things that are static to the application running in the container.

- To support the goal of being able to move a bundle between hosts we
  should make it clear what parts of the spec are and are not portable
  between hosts so that upon landing on a new host the non-portable
  options may be rewritten or removed.

- In order to attach a cryptographic identity to a bundle we must not
  include details in the bundle that are host specific.
2015-08-26 09:44:09 -07:00
Vincent Batts 9ad789fa16 Merge pull request #112 from ChengTiesheng/patch-1
Fix typos in the "Namespace types" section
2015-08-20 20:22:51 -07:00
Tiesheng 45ae53d4db Fix typos in the "Namespace types" section
Signed-off-by: ChengTiesheng <chengtiesheng@huawei.com>
2015-08-20 11:08:40 +08:00
Mrunal Patel 0c505a55d8 Merge pull request #106 from zenlinTechnofreak/updateDevice
Change Device field order in spec_linux.go
2015-08-12 18:27:25 -07:00
Michael Crosby 7e4a877967 Merge pull request #104 from vbatts/contribution-updates
README.md: contribution about discussion
2015-08-12 13:44:38 -07:00
Vincent Batts 7e22d0d6f7 README.md: contribution about discussion
Leaning on aspects of golang's contribution
(https://golang.org/doc/contribute.html)

Signed-off-by: Vincent Batts <vbatts@redhat.com>
2015-08-12 13:30:22 -04:00
LinZhinan(Zen Lin) 4661b21676 Change Device field order in spec_linux.go, 'Path' should be top of the 'Type' field, according to the different of the config-linux.md, 'Path' field is the unique key.
Signed-off-by: LinZhinan(Zen Lin) <linzhinan@huawei.com>
2015-08-11 15:05:29 +08:00
Vincent Batts da9240a712 Merge pull request #102 from wking/meeting-agendas
README: Document pre-meeting agenda alteration
2015-08-10 15:45:20 -04:00
W. Trevor King 6ef382b69c README: Document YouTube and IRC backchannel for meetings
On Mon, Aug 10, 2015 at 09:38:50AM -0700, Mrunal Patel wrote [1]:
> There is a limit of 10 participants per hangout. So, I will
> broadcast it at the time when it starts and people who aren't
> invited could view the stream and discuss on IRC.

On Mon, Aug 10, 2015 at 09:53:59AM -0700, Mrunal Patel wrote [2]:
> I think the youtube channel should work as the broadcast link
> https://www.youtube.com/channel/UC1wmLdEYmwWcsFg7bt1s5nw

The IRC channel location is from opencontainers/web@f693390f (updated
content, 2015-06-21).

[1]: https://groups.google.com/a/opencontainers.org/d/msg/dev/Cy5uFI_ySpg/E1FnYUmfDwAJ
     From: Mrunal Patel
     Subject: Re: Discussions and Notes
     Date: Mon, 10 Aug 2015 09:38:50 -0700
     Message-ID: <CANEZBD7K=8+i7RaTAkg_0XLUSQrZLykGR0bxce-JtErO8KAQ1Q@mail.gmail.com>
     Cc: dev <dev@opencontainers.org>, ...
[2]: https://groups.google.com/a/opencontainers.org/d/msg/dev/Cy5uFI_ySpg/X4RQEx2gDwAJ
     From: Mrunal Patel
     Subject: Re: Discussions and Notes
     Date: Mon, 10 Aug 2015 09:53:59 -0700
     Message-ID: <CANEZBD7snSro5GXYc6QRuk3+KnR0WAeFThfQXvOcnx3t9jNXag@mail.gmail.com>
     Cc: dev <dev@opencontainers.org>, ...

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-10 10:15:03 -07:00
W. Trevor King f9bf5c1b55 README: Document pre-meeting agenda alteration
On Wed, Aug 05, 2015 at 11:57:59AM -0700, Mrunal Patel wrote [1]:
> We could also have guests on the hangout if they have some important
> topic to present. We can decide that on the topics being discussed
> in the mailing list.

On Sat, Aug 08, 2015 at 08:23:21AM -0400, Vincent Batts wrote [2]:
> We said the topics would be proposed on this list. Discussion notes have
> been shared as a Google doc so far. I'm not opposed to markdown notes, but
> initially that just seems like an repo to me.

More generally, the topic of feedback loops came up in the 2015-08-05
meeting [3,4] (after 26:02 in the video), and the consensus was to
start discussion anything that seemed worth discussion on the mailing
list ("conversations and discussions should be on
dev@opencontainers.org mailing-list first, conversations and
discussions should be on dev@opencontainers.org" [3]).  That doesn't
speak to agenda-formation specifically, but it makes an official
policy of discussing most things on the mailing list, and the two
posts I quote above extend that general approach to agenda formation.

While touching this paragraph, I also re-wrapped it to match
README.md#markdown-style.

[1]: https://groups.google.com/a/opencontainers.org/d/msg/dev/JsXgi4kxkBg/Gw7GvPodDgAJ
     From: Mrunal Patel
     Subject: Re: Hangout link for today
     Date: Wed, 5 Aug 2015 11:57:59 -0700
     Message-ID: <CANEZBD6Zs5Ht8dgkvSHRHQGaVLms_kSGqCV00AJD6eFLm9hR4w@mail.gmail.com>
     Cc: dev <dev@opencontainers.org>, …
[2]: https://groups.google.com/a/opencontainers.org/d/msg/dev/41jZ9Qe7R5c/ZInajC_0DgAJ
     From: Vincent Batts
     Subject: Re: Open Container Weekly Meeting - Aug 5, 2015
     Date: Sat, 8 Aug 2015 08:23:21 -0400
     Message-ID: <CAN6Zp5yFX8yLG3b-82SAq7AmCxVpoy1tyt0K1ijFqSsCjKPRpg@mail.gmail.com>
     Cc: dev <dev@opencontainers.org>, …
[3]: https://docs.google.com/document/d/1a5UW7MRLVaUDEjuQmRudYMZcPV0bBtPD2QEOLT_3zi0/edit?usp=sharing
[4]: https://plus.google.com/events/cqfpicicbnra9mv6kvpj0mb24u4

Signed-off-by: W. Trevor King <wking@tremily.us>
2015-08-08 16:30:06 -07:00
Mrunal Patel 5eec1fb670 Merge pull request #93 from vbatts/implementations-page
Implementations page
2015-08-07 11:44:13 -07:00
Michael Crosby d32cd948d6 Merge pull request #89 from mrunalp/security
Add security section
2015-08-07 14:35:05 -04:00
Mrunal Patel 63d3d272cb Add Apparmor, Selinux and Seccomp
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-08-07 14:20:59 -04:00
Mrunal Patel af36d746ba Add Apparmor, Selinux and Seccomp sections
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-08-07 14:19:10 -04:00
Vincent Batts b3ebf849bf .: Adding listing of implementations
* runc
* runv - https://groups.google.com/a/opencontainers.org/d/msg/dev/Tjq5QJ_eez0/LMt3dgReDQAJ
* ocp-testing - https://groups.google.com/a/opencontainers.org/d/msg/dev/_XUjuKzL84g/i2n5s0iUBgAJ

Signed-off-by: Vincent Batts <vbatts@redhat.com>
2015-08-07 13:18:13 -04:00
Michael Crosby cb928bb8c0 Merge pull request #94 from LK4D4/expose_more_about_device
Replace Linux.Device with more specific config
2015-08-06 18:41:03 -04:00
Alexander Morozov 5273b3d785 Replace Linux.Device with more specific config
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2015-08-06 10:26:29 -07:00
Mrunal Patel 7414f4d3e9 Merge pull request #92 from vbatts/vbatts-travis_file
.: adding travis file for future CI
2015-08-04 11:38:52 -07:00
Michael Crosby 5b31bb2b77 Merge pull request #34 from mrunalp/hooks
hooks: start with pre-start and post-stop hooks.
2015-08-03 14:40:30 -04:00
Mrunal Patel 15dee2e03d runtime: Add prestart/poststop hooks
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>

Add hooks to the spec

Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2015-08-03 14:36:42 -04:00
Vincent Batts 093e5e2fa3 .: adding travis file for future CI
Signed-off-by: Vincent Batts <vbatts@redhat.com>
2015-08-03 13:16:25 -04:00
Michael Crosby 16aac944b6 Merge pull request #91 from vbatts/vbatts-cleanup
golint
2015-08-03 13:09:55 -04:00
Vincent Batts 8029d26bca spec_linux: remove ending periods on one-line comments
Signed-off-by: Vincent Batts <vbatts@redhat.com>
2015-08-03 10:20:46 -04:00
Vincent Batts 8cb38067f2 spec_linux: conform to `golint`
Signed-off-by: Vincent Batts <vbatts@redhat.com>
2015-08-03 10:19:56 -04:00
Vincent Batts 9ed6de6631 Merge pull request #85 from philips/bundle-use-case
bundle: add initial run use case
2015-07-31 22:08:14 -04:00
Brandon Philips 4b90d6bed4 bundle: add initial run use case
Signed-off-by: Brandon Philips <brandon.philips@coreos.com>
2015-07-30 11:54:17 -07:00