d663afe2a3
Rebased with spec changes
...
Signed-off-by: rajasec <rajasec79@gmail.com>
2016-04-16 07:10:02 +05:30
82050a5b8f
Get runc to build clean on Solaris
...
Signed-off-by: Amit Krishnan <krish.amit@gmail.com>
2016-04-12 16:13:08 -07:00
99b423c6cb
Merge pull request #746 from crosbymichael/bump_spec412
...
Update to version 0.1.0
2016-04-12 14:34:16 -07:00
f417e993d0
Update spec to v0.5.0
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-04-12 14:11:40 -07:00
660029b476
Merge pull request #745 from AkihiroSuda/very-trivial-style-fix
...
Fix trivial style errors reported by `go vet` and `golint`
2016-04-12 13:33:00 -07:00
6460c26528
Merge pull request #744 from hqhq/hq_fix_swap_memory
...
Fix problem when swap memory unsupported
2016-04-12 10:05:47 -07:00
917c1f6d60
Add unit tests for 'utils' package
...
Signed-off-by: Alberto Leal <albertonb@gmail.com>
2016-04-12 13:29:37 +01:00
1829531241
Fix trivial style errors reported by `go vet` and `golint`
...
No substantial code change.
Note that some style errors reported by `golint` are not fixed due to possible compatibility issues.
Signed-off-by: Akihiro Suda <suda.kyoto@gmail.com>
2016-04-12 08:13:16 +00:00
792251ae38
Fix problem when swap memory unsupported
...
When swap memory is unsupported, Docker will set
cgroup.Resources.MemorySwap as -1.
Fixes: https://github.com/docker/docker/pull/21937
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2016-04-12 15:08:10 +08:00
af0cc71369
Merge pull request #717 from albertoleal/config-unittests
...
Add unit tests for configs.Hooks
2016-04-12 02:43:16 +00:00
4023fe0fb9
Merge pull request #724 from cloudfoundry-incubator/hookstate-bundlepath
...
HookState adhears to OCI
2016-04-11 14:59:14 -07:00
f54e41f7f0
Merge pull request #742 from LK4D4/carry_732
...
Fix setupDev logic in rootfs_linux.go
2016-04-11 11:16:36 -07:00
42234a85d1
Fix setupDev logic in rootfs_linux.go
...
setupDev was introduced in #96 , but broken since #536 because spec 0.3.0 introduced default devices.
Fix #80 again
Fix docker/docker#21808
Signed-off-by: Akihiro Suda <suda.kyoto@gmail.com>
Signed-off-by: Alexander Morozov <lk4d4@docker.com>
2016-04-11 10:29:40 -07:00
5640330693
Fix for runc failing when rootfs has a traling slash
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2016-04-11 09:50:28 -07:00
69be363508
Add unit tests for configs.Hooks
...
Signed-off-by: Alberto Leal <albertonb@gmail.com>
2016-04-09 07:27:33 +00:00
6c59168557
Merge pull request #730 from rhatdan/getfilecon
...
Add label.GetFileLabel interface
2016-04-09 05:25:11 +00:00
b24892c6b3
Fix broken build due to missing import
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2016-04-08 16:35:20 -07:00
1bef485001
Merge pull request #735 from mrunalp/mcs_race
...
Synchronize writes to mcs map
2016-04-08 14:37:53 -07:00
c6cfce304b
Synchronize writes to mcs map
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2016-04-08 14:16:00 -07:00
bee8cb5fbb
Report hook output on error
...
Fixes #733
This reports the stdout/err for a hook if it returns a non-zero exit
status.
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-04-08 11:02:44 -07:00
ff066b84ce
Add label.GetFileLabel interface
...
One of our volume plugins needs to get the label of the target mount point
so that it can set the content inside of the volume to match.
We need label.GetFileLabel() to make this work.
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
2016-04-08 13:10:37 -04:00
284c72448d
Merge pull request #722 from rajasec/readme-signal
...
Updating README with container signal interaction
2016-04-07 14:37:51 +08:00
d4f77606f1
Merge pull request #718 from albertoleal/validator-unittests
...
Add unit tests for validate.Validator
2016-04-06 09:34:32 -07:00
f7ae27bfb7
HookState adhears to OCI
...
Signed-off-by: George Lestaris <glestaris@pivotal.io>
Signed-off-by: Ed King <eking@pivotal.io>
2016-04-06 16:57:59 +01:00
dca2d12760
Add unit tests for validate.Validator
...
Signed-off-by: Alberto Leal <albertonb@gmail.com>
2016-04-06 11:18:11 +01:00
3f4f4420fd
Merge pull request #592 from hqhq/hq_fix_update_memory
...
Fix problem when update memory and swap memory
2016-04-05 10:19:33 -07:00
57f2ae5d72
Updating README with container signal interaction
...
Signed-off-by: rajasec <rajasec79@gmail.com>
2016-04-05 19:41:27 +05:30
df25eddce6
Add spec support for masked and readonly paths
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-04-01 13:04:47 -07:00
89ab7f2ccc
Merge pull request #712 from mrunalp/comment_fixup
...
Fixup incorrect package name in a comment
2016-03-31 17:02:02 +08:00
0c1c615ebd
Merge pull request #711 from rhatdan/sysctl
...
Return a more meaningful error when namespaces are disabled
2016-03-30 15:35:06 -07:00
79a2479099
Fixup incorrect pacakge name in a comment
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2016-03-30 14:48:19 -07:00
2441732d6f
Merge pull request #710 from crosbymichael/no-pivot
...
Add --no-pivot option for containers on ramdisk
2016-03-30 13:57:24 -07:00
3cfff676b1
libcontainer: user: general cleanups
...
Some of the code was quite confusing inside libcontainer/user, so
refactor and comment it so future maintainers can understand what's
going and what edge cases we have to deal with.
Signed-off-by: Aleksa Sarai <asarai@suse.de>
2016-03-31 07:44:16 +11:00
4468dd5890
libcontainer: user: add tests for numeric user specifications
...
Signed-off-by: Aleksa Sarai <asarai@suse.de>
2016-03-31 07:44:16 +11:00
69af385de6
libcontainer: user: always treat numeric ids numerically
...
Most shadow-related tools don't treat numeric ids as potential
usernames, so change our behaviour to match that. Previously, using an
explicit specification like 111:222 could result in the UID and GID not
being 111 and 222 respectively (which is confusing).
Signed-off-by: Aleksa Sarai <asarai@suse.de>
2016-03-31 07:33:31 +11:00
d2a39ea043
Return a more meaningful error when namespaces are disabled
...
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
2016-03-30 16:16:24 -04:00
12bd4cffd0
Add --no-pivot option for containers on ramdisk
...
This adds a `--no-pivot` cli flag to runc so that a container's rootfs
can be located ontop of ramdisk/tmpfs and not fail because you cannot
pivot root.
This should be a cli flag and not part of the spec because this is a
detail of the host/runtime environment and not an attribute of a
container.
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-03-30 12:02:17 -07:00
6f84d902ca
Implement hook timeouts
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-03-29 11:14:59 -07:00
e55fcbda8a
Merge pull request #683 from thtanaka/mqueue-label
...
Only perform mount labelling when necessary
2016-03-29 09:30:43 -07:00
ed03709656
Merge pull request #700 from marcosnils/tests_fix
...
Fix hanging tests when run without root
2016-03-28 16:47:26 -07:00
851c050340
Merge pull request #686 from hqhq/hq_refactor_nsexec
...
Refactor nsexec.c and add some comments
2016-03-28 09:36:06 -07:00
857d418b09
Merge pull request #698 from ggaaooppeenngg/gaopeng/format-errorf
...
Use %v for map structure format
2016-03-28 09:28:28 -07:00
d9520aeba4
Close opened files before exit
...
Not to say it'll cause memory leak, it'll still be a
good practice.
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2016-03-28 11:16:34 +08:00
3b7e10652b
Refactor nsexec.c and add some comments
...
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2016-03-28 11:16:12 +08:00
d8b8f76c4f
Fix problem when update memory and swap memory
...
Currently, if we start a container with:
`docker run -ti --name foo --memory 300M --memory-swap 500M busybox sh`
Then we want to update it with:
`docker update --memory 600M --memory-swap 800M foo`
It'll get error because we can't set memory to 600M with
the 500M limit of swap memory.
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2016-03-28 10:48:29 +08:00
f5ad78dc49
Merge pull request #699 from ggaaooppeenngg/gaopeng/fix-typo
...
Fix typo
2016-03-27 16:27:52 -07:00
61ffdc0661
Fix hanging tests when run without root
...
Fixes #692
Signed-off-by: Marcos Lilljedahl <marcosnils@gmail.com>
2016-03-27 01:53:01 -03:00
3fa246609c
Fix typo
...
Signed-off-by: Peng Gao <peng.gao.dut@gmail.com>
2016-03-27 12:44:16 +08:00
ffbc626e53
Use %v for map structure format
...
Based on Golang document, %s is for "the uninterpreted bytes of the
string or slice", so %v is more appropriate.
Signed-off-by: Peng Gao <peng.gao.dut@gmail.com>
2016-03-26 23:28:59 +08:00
9428c58e85
Fix libcontainer README.md example config
...
Signed-off-by: Matt Hartzler <matt@cryptopanic.org>
2016-03-25 21:49:02 -05:00
rajasec
Amit Krishnan
Alexander Morozov
Michael Crosby
Alberto Leal
Akihiro Suda
Qiang Huang
Aleksa Sarai
Mrunal Patel
Mrunal Patel
Dan Walsh
George Lestaris
Aleksa Sarai
Marcos Lilljedahl
Peng Gao
Matt Hartzler