Merge pull request #2674 from crosbymichael/runc
Update runc to 00dc70017d222b178a002ed30e9321b126
This commit is contained in:
		@@ -20,7 +20,7 @@ github.com/gogo/protobuf v1.0.0
 | 
				
			|||||||
github.com/gogo/googleapis 08a7655d27152912db7aaf4f983275eaf8d128ef
 | 
					github.com/gogo/googleapis 08a7655d27152912db7aaf4f983275eaf8d128ef
 | 
				
			||||||
github.com/golang/protobuf v1.1.0
 | 
					github.com/golang/protobuf v1.1.0
 | 
				
			||||||
github.com/opencontainers/runtime-spec eba862dc2470385a233c7507392675cbeadf7353 # v1.0.1-45-geba862d
 | 
					github.com/opencontainers/runtime-spec eba862dc2470385a233c7507392675cbeadf7353 # v1.0.1-45-geba862d
 | 
				
			||||||
github.com/opencontainers/runc 20aff4f0488c6d4b8df4d85b4f63f1f704c11abd
 | 
					github.com/opencontainers/runc 00dc70017d222b178a002ed30e9321b12647af2d
 | 
				
			||||||
github.com/sirupsen/logrus v1.0.0
 | 
					github.com/sirupsen/logrus v1.0.0
 | 
				
			||||||
github.com/urfave/cli 7bc6a0acffa589f415f88aca16cc1de5ffd66f9c
 | 
					github.com/urfave/cli 7bc6a0acffa589f415f88aca16cc1de5ffd66f9c
 | 
				
			||||||
golang.org/x/net b3756b4b77d7b13260a0a2ec658753cf48922eac
 | 
					golang.org/x/net b3756b4b77d7b13260a0a2ec658753cf48922eac
 | 
				
			||||||
 
 | 
				
			|||||||
							
								
								
									
										12
									
								
								vendor/github.com/opencontainers/runc/README.md
									
									
									
										generated
									
									
										vendored
									
									
								
							
							
						
						
									
										12
									
								
								vendor/github.com/opencontainers/runc/README.md
									
									
									
										generated
									
									
										vendored
									
									
								
							@@ -87,6 +87,18 @@ You can run a specific test case by setting the `TESTFLAGS` variable.
 | 
				
			|||||||
# make test TESTFLAGS="-run=SomeTestFunction"
 | 
					# make test TESTFLAGS="-run=SomeTestFunction"
 | 
				
			||||||
```
 | 
					```
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					You can run a specific integration test by setting the `TESTPATH` variable.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					```bash
 | 
				
			||||||
 | 
					# make test TESTPATH="/checkpoint.bats"
 | 
				
			||||||
 | 
					```
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					You can run a test in your proxy environment by setting `DOCKER_BUILD_PROXY` and `DOCKER_RUN_PROXY` variables.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					```bash
 | 
				
			||||||
 | 
					# make test DOCKER_BUILD_PROXY="--build-arg HTTP_PROXY=http://yourproxy/" DOCKER_RUN_PROXY="-e HTTP_PROXY=http://yourproxy/"
 | 
				
			||||||
 | 
					```
 | 
				
			||||||
 | 
					
 | 
				
			||||||
### Dependencies Management
 | 
					### Dependencies Management
 | 
				
			||||||
 | 
					
 | 
				
			||||||
`runc` uses [vndr](https://github.com/LK4D4/vndr) for dependencies management.
 | 
					`runc` uses [vndr](https://github.com/LK4D4/vndr) for dependencies management.
 | 
				
			||||||
 
 | 
				
			|||||||
							
								
								
									
										6
									
								
								vendor/github.com/opencontainers/runc/libcontainer/nsenter/README.md
									
									
									
										generated
									
									
										vendored
									
									
								
							
							
						
						
									
										6
									
								
								vendor/github.com/opencontainers/runc/libcontainer/nsenter/README.md
									
									
									
										generated
									
									
										vendored
									
									
								
							@@ -10,8 +10,8 @@ The `nsenter` package will `import "C"` and it uses [cgo](https://golang.org/cmd
 | 
				
			|||||||
package. In cgo, if the import of "C" is immediately preceded by a comment, that comment, 
 | 
					package. In cgo, if the import of "C" is immediately preceded by a comment, that comment, 
 | 
				
			||||||
called the preamble, is used as a header when compiling the C parts of the package.
 | 
					called the preamble, is used as a header when compiling the C parts of the package.
 | 
				
			||||||
So every time we  import package `nsenter`, the C code function `nsexec()` would be 
 | 
					So every time we  import package `nsenter`, the C code function `nsexec()` would be 
 | 
				
			||||||
called. And package `nsenter` is now only imported in `main_unix.go`, so every time
 | 
					called. And package `nsenter` is only imported in `init.go`, so every time the runc
 | 
				
			||||||
before we call `cmd.Start` on linux, that C code would run.
 | 
					`init` command is invoked, that C code is run.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Because `nsexec()` must be run before the Go runtime in order to use the
 | 
					Because `nsexec()` must be run before the Go runtime in order to use the
 | 
				
			||||||
Linux kernel namespace, you must `import` this library into a package if
 | 
					Linux kernel namespace, you must `import` this library into a package if
 | 
				
			||||||
@@ -37,7 +37,7 @@ the parent `nsexec()` will exit and the child `nsexec()` process will
 | 
				
			|||||||
return to allow the Go runtime take over.
 | 
					return to allow the Go runtime take over.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
NOTE: We do both `setns(2)` and `clone(2)` even if we don't have any
 | 
					NOTE: We do both `setns(2)` and `clone(2)` even if we don't have any
 | 
				
			||||||
CLONE_NEW* clone flags because we must fork a new process in order to
 | 
					`CLONE_NEW*` clone flags because we must fork a new process in order to
 | 
				
			||||||
enter the PID namespace.
 | 
					enter the PID namespace.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
							
								
								
									
										2
									
								
								vendor/github.com/opencontainers/runc/libcontainer/nsenter/nsexec.c
									
									
									
										generated
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								vendor/github.com/opencontainers/runc/libcontainer/nsenter/nsexec.c
									
									
									
										generated
									
									
										vendored
									
									
								
							@@ -211,7 +211,7 @@ static int try_mapping_tool(const char *app, int pid, char *map, size_t map_len)
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
	/*
 | 
						/*
 | 
				
			||||||
	 * If @app is NULL, execve will segfault. Just check it here and bail (if
 | 
						 * If @app is NULL, execve will segfault. Just check it here and bail (if
 | 
				
			||||||
	 * we're in this path, the caller is already getting desparate and there
 | 
						 * we're in this path, the caller is already getting desperate and there
 | 
				
			||||||
	 * isn't a backup to this failing). This usually would be a configuration
 | 
						 * isn't a backup to this failing). This usually would be a configuration
 | 
				
			||||||
	 * or programming issue.
 | 
						 * or programming issue.
 | 
				
			||||||
	 */
 | 
						 */
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user