Abhinandan Prativadi
5a119200b8
Creating permanent sandbox namespace
...
This commit contains changes to create/delete permanent namespace
for a sandbox container.
Signed-off-by: Abhinandan Prativadi <abhi@docker.com>
2017-08-24 10:43:42 -07:00
zhangzhenhao
331e542c09
add the user id support of runAsUser
...
Signed-off-by: zhangzhenhao <zhangzhenhao@outlook.com>
2017-08-24 23:29:45 +08:00
Lantao Liu
2faa665eb2
Merge pull request #155 from miaoyq/support-nonewprivileges
...
Support NoNewPrivileges
2017-08-23 20:58:38 -07:00
Yanqiang Miao
1aec120d5f
Support NoNewPrivileges
...
fixes #117
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
2017-08-24 08:37:40 +08:00
Lantao Liu
45ee2e554a
Add container attach support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-23 23:48:31 +00:00
Lantao Liu
77b703f1e7
Move generateID to util.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-23 23:46:55 +00:00
Lantao Liu
dd6e9fb88d
Merge pull request #156 from yanxuean/metalabel
...
Checkpoint and restart recovery
2017-08-23 15:36:19 -07:00
yanxuean
d2757cb8f9
Checkpoint and restart recovery
...
fix part of #120
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
2017-08-23 17:01:13 +08:00
Lantao Liu
7901f56367
Merge pull request #150 from Random-Liu/support-update-container-resources
...
Support update container resources
2017-08-22 23:28:48 -07:00
Lantao Liu
f6d99abcf4
Add hostport support
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-23 01:33:02 +00:00
Lantao Liu
8f898cb3b8
Import ocicni update from https://github.com/Random-Liu/ocicni
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-23 01:25:12 +00:00
Lantao Liu
a0589d37dd
Implement container resources update
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-22 18:40:30 +00:00
Lantao Liu
d41c23e31d
Update code to make it build
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-22 05:38:51 +00:00
Lantao Liu
50b01812ce
Merge pull request #147 from miaoyq/group-all-privileged-logic
...
Group all privileged logic together
2017-08-21 18:43:06 -07:00
Yanqiang Miao
8adad23015
Group all privileged logic together
...
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
2017-08-22 09:16:37 +08:00
Lantao Liu
c05a7e74ee
Add node e2e test CI.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-21 21:21:41 +00:00
Lantao Liu
dcc3cb2a05
Merge pull request #137 from Random-Liu/cleanup-with-new-client
...
Some cleanup after switching to new client.
2017-08-18 15:04:24 -07:00
Lantao Liu
ed640d3972
Some cleanup after switching to new client.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-18 21:04:38 +00:00
Lantao Liu
8e9a251f72
Merge pull request #135 from yanxuean/myfeature
...
The parameters of InitCNI should be filled in reverse order
2017-08-16 19:50:22 -07:00
yanxuean
8cc0347b0a
The parameters of InitCNI should be filled in reverse order.
...
fix #131
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
2017-08-17 10:18:40 +08:00
Lantao Liu
f555bb1242
Add portforward support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-17 00:13:31 +00:00
Abhinandan Prativadi
32e0313418
Containerd client integration
...
This commit:
1) Replaces the usage of containerd GRPC APIs with the containerd client for all operations related to containerd.
2) Updated containerd to v1.0alpha4+
3) Updated runc to v1.0.0
Signed-off-by: Abhinandan Prativadi <abhi@docker.com>
2017-08-16 14:43:22 -07:00
Lantao Liu
2427d332f0
Add TERM=xterm when tty=true.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-11 16:53:40 +00:00
Lantao Liu
86a0f6a59b
Merge pull request #126 from miaoyq/change-defaut-spec
...
Replace the original default spec with containerd default spec
2017-08-10 14:25:23 -07:00
Yanqiang Miao
9cc93886ea
Replace the original default spec with containerd default spec
...
The original default spec contain `seccomp` configuration,
but some OS do not support this feature, such as ubuntu14.04,
and `make test-cri` always fail. The containerd default spec dosen't
contain `seccomp`, so I think we could replace the default spec
with containerd default spec.
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
2017-08-10 20:31:03 +08:00
Mike Brown
8d37d97d01
sets sysctls from pod config annotations
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2017-08-09 18:42:04 -05:00
Lantao Liu
4c5cea9258
Handle device symlink.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-08 00:53:15 +00:00
Lantao Liu
54286313ce
Add container Exec support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-07 22:49:06 +00:00
Lantao Liu
8b56c91ec5
Extract execInContainer
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-07 22:35:50 +00:00
Lantao Liu
bf270fae1c
Use containerd client for container execsync.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-08-04 18:32:39 +00:00
Mike Brown
73748840da
Swicth to 1.0.0-alpha2 containerd api.
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2017-08-02 23:21:37 +00:00
Lantao Liu
ffb69423ec
Temporarily remove unit test relying on fake containerd services.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-07-31 22:42:10 +00:00
Lantao Liu
7b16a35287
Use new metadata store.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-07-28 23:35:31 +00:00
Lantao Liu
4317e6119a
Remove sandbox truncindex.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-07-28 23:35:31 +00:00
Random-Liu
b398a161de
Get runtime spec from container metadata.
...
Signed-off-by: Random-Liu <lantaol@google.com>
2017-07-28 16:26:20 +00:00
Lantao Liu
faf592069b
Remove out-of-date TODOs.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-30 01:19:51 +00:00
Lantao Liu
4c48ad780f
Do not teardown network namespace when using host network.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-29 01:30:04 +00:00
Lantao Liu
333ea04846
Merge pull request #95 from Random-Liu/fix-verify
...
Remove unused fields and comments.
2017-06-28 10:21:11 -07:00
Lantao Liu
7ddc85f3ca
Remove unused fields and comments.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-28 16:59:35 +00:00
Lantao Liu
054bcfbf68
Merge pull request #91 from Random-Liu/support-oom-event
...
Handle OOM event.
2017-06-26 00:18:27 -07:00
Lantao Liu
a2f6f7f128
Handle OOM event.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-26 07:10:35 +00:00
Lantao Liu
14fd8401a2
Set sandbox container resource limit.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-23 01:23:53 +00:00
Lantao Liu
d5674be41f
Add pull image authentication.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-22 18:41:02 +00:00
Lantao Liu
1bf09089b3
Register all possible repo tags and repo digests.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-21 20:20:34 +00:00
Lantao Liu
78b74a6a58
Merge pull request #85 from Random-Liu/update-cri
...
Update CRI to d779e9c9561b732adf06263c5424889e7564fdbd.
2017-06-21 13:18:24 -07:00
Lantao Liu
4d7735567c
Merge pull request #82 from mikebrow/containerd-client-library
...
Use containerd client library to connect to containerd services
2017-06-20 19:03:18 -07:00
Lantao Liu
862d00a21c
Update CRI to d779e9c9561b732adf06263c5424889e7564fdbd.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2017-06-21 01:56:13 +00:00
Mike Brown
97063a0e34
switch to client provided services and address nits
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2017-06-20 19:19:14 -05:00
Mike Brown
0fe8c17fdf
godeps udpate
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2017-06-20 19:18:48 -05:00
Mike Brown
20fc0227ae
use containerd client library
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2017-06-20 19:18:29 -05:00