github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
1,685 Commits 3 Branches 2 Tags 112 MiB
a1e4f99a32
Commit Graph

1685 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Lantao Liu
df67dfff19
Merge pull request #885 from Random-Liu/enhance-container-stop 
Fix an issue that container/sandbox can't be stopped.
 2018-08-27 10:26:11 -07:00
Lantao Liu
bca304ff3e Fix an issue that container/sandbox can't be stopped. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-24 18:54:08 -07:00
Lantao Liu
a3af7393fe
Merge pull request #880 from thaJeztah/align_dependencies_to_tags 
Use tagged versions for dependencies where possible
 2018-08-22 10:36:35 -07:00
Sebastiaan van Stijn
1d7f5f43b2
Use tagged versions for dependencies where possible 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2018-08-22 15:31:25 +02:00
Lantao Liu
58eb04550d
Merge pull request #873 from miaoyq/verify-selinux-level 
Verify selinux level format
 2018-08-13 18:57:01 -07:00
Yanqiang Miao
a87bda08c0 update selinux to b6fa367 
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
 2018-08-14 08:33:43 +08:00
Yanqiang Miao
415727cd9f verify selinux level format 
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
 2018-08-14 08:33:34 +08:00
Lantao Liu
7d483b2fb0
Merge pull request #874 from Random-Liu/update-containerd 
Update containerd to b9eeaa1ce8.
 2018-08-09 11:00:36 -07:00
Lantao Liu
6379fd0346 Update containerd to b9eeaa1ce8. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-09 01:53:44 -07:00
Lantao Liu
c9d6151526
Merge pull request #869 from Random-Liu/support-netd 
Support netd in GCE bootstrap.
 2018-07-31 10:44:53 -07:00
Lantao Liu
d1dcacf9ef Support netd in GCE bootstrap. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-30 23:37:00 -07:00
Lantao Liu
1263024a5a
Merge pull request #864 from Random-Liu/unpack-during-import 
Unpack image during import.
 2018-07-26 10:12:45 -07:00
Lantao Liu
e1a37e8797 Unpack image during import. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-26 07:48:41 +00:00
Lantao Liu
a0cfc8c1d2
Merge pull request #857 from egernst/untrusted-priv 
sandbox: separate host accessing workload and privileged
 2018-07-24 12:11:41 -07:00
Eric Ernst
9a01272dc2 sandbox: separate host accessing workload and privileged 
VM isolated runtimes can support privileged workloads. In this
scenario, access to the guest VM is provided instead of the host.
Based on this, allow untrusted runtimes to run privileged workloads.

If the workload is specifically asking for node PID/IPC/network, etc.,
then continue to require the trusted runtime.

This commit repurposes the hostPrivilegedSandbox utility function to
only check for node namespace checking.

Fixes: #855

Signed-off-by: Eric Ernst <eric.ernst@intel.com>
 2018-07-22 16:51:22 -07:00
Lantao Liu
2be13a8a30
Merge pull request #858 from Random-Liu/stream-serve-on-local 
Serve streaming on localhost by default to match k8s 1.11 default.
 2018-07-20 19:12:53 -07:00
Lantao Liu
b3d6f16383 Serve streaming on localhost by default to match k8s 1.11 default. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-21 01:10:45 +00:00
Lantao Liu
42a98de252
Merge pull request #851 from yanxuean/support-no-pivot 
support no_pivot option for runc
 2018-07-19 20:31:38 -07:00
yanxuean
7065dd81f9 support no_pivot option for runc 
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
 2018-07-20 08:46:50 +08:00
Lantao Liu
7beac6fcc1
Merge pull request #849 from dmcgowan/remove-stringid 
Replace stringid call with simple random reader
 2018-07-12 18:32:28 -07:00
Derek McGowan
1984e451d5 Replace stringid with simple rand reader 
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
 2018-07-12 16:40:45 -07:00
Lantao Liu
2eb817c7bd
Merge pull request #843 from Random-Liu/document-no-overwrite-dir 
Use `--no-overwrite-dir` in installation doc.
 2018-07-11 11:50:46 -07:00
Lantao Liu
5637e8be40 Set 0022 umask for hack/release.sh. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 18:26:13 +00:00
Lantao Liu
0f3c83b11b Use --no-overwrite-dir in installation doc. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 18:04:48 +00:00
Lantao Liu
1d0d9b3423
Merge pull request #841 from Random-Liu/add-back-missing-vendor 
Add missing vendor back.
 2018-07-11 10:42:38 -07:00
Lantao Liu
fb60d18fad Add missing vendor back. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 08:49:47 +00:00
Lantao Liu
ca32566575
Merge pull request #838 from Random-Liu/add-auth-config 
Add auth config
 2018-07-10 23:55:33 -07:00
Lantao Liu
1d9a754f6a Update containerd to b382b6fe0b. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-10 19:03:27 -07:00
Lantao Liu
e4ad68098e Remove pkg/containerd/resolver package. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-09 19:08:48 -07:00
Lantao Liu
952e53bf58 Add registry auth config, and use docker resolver in containerd. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-09 19:08:48 -07:00
Lantao Liu
5ad95b2db4
Merge pull request #833 from Random-Liu/update-containerd-k8s 
Update containerd and k8s.
 2018-06-27 17:08:01 -07:00
Lantao Liu
88c5165bfd Update containerd and k8s. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-27 23:08:00 +00:00
Lantao Liu
bc99f7a7e8
Merge pull request #832 from Random-Liu/remove-crictl-on-gce 
Remove crictl on GCE for all cases.
 2018-06-26 18:39:46 -07:00
Lantao Liu
f580374825 Remove crictl on GCE for all cases. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-26 22:37:23 +00:00
Lantao Liu
c68b60514e
Merge pull request #831 from Random-Liu/fix-link 
Fix another link.
 2018-06-26 14:44:39 -07:00
Lantao Liu
fd71c9f065 Fix another link. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-26 13:30:32 -07:00
Lantao Liu
47b8d30bb3
Merge pull request #828 from yujuhong/fix-gce-link 
Fix the link to the GCE getting-started guide
 2018-06-26 13:07:50 -07:00
Lantao Liu
0e42438e7a
Merge pull request #829 from Random-Liu/local-stream-server 
Set stream server to serve on localhost on GCE.
 2018-06-26 11:23:06 -07:00
Lantao Liu
f6ab733f9e Set stream server to serve on localhost on GCE. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-26 07:13:00 +00:00
Yu-Ju Hong
e23c0e708a
Fix link to GCE getting started guide 
Signed-off-by: Yu-Ju Hong <yjhong@google.com>
 2018-06-25 12:10:03 -07:00
Lantao Liu
4eb4a29577
Merge pull request #825 from abhi/cni_config 
Change to keep in sync with latest cni config
 2018-06-21 16:14:31 -07:00
Abhinandan Prativadi
860971025f vendoring latest go-cni with fixes 
Signed-off-by: Abhinandan Prativadi <abhi@docker.com>
 2018-06-21 20:43:51 +00:00
Abhinandan Prativadi
263b0b99d0 Change to keep in sync with latest cni config 
This commit contains change to pick the latest cni config
from the configured CNIConfDir.
With this change any changes made to the cni config file will
be picked up on the kubelet's runtime status check call.
Ofcourse this would lead to undefined behavior when the cni config
change is made in parallel during pod creation. However its
reasonable to assume that the operator is aware of the need to
drain the nodes of pods before making cni configuration change.
The behavior is currently not defined in kubernetes. However
I see that similar approach being adopted in the upstream kubernetes
with dockershim. Keeping the behavior consistent for now.

Signed-off-by: Abhinandan Prativadi <abhi@docker.com>
 2018-06-21 20:43:38 +00:00
Lantao Liu
07020dbdda
Merge pull request #820 from filbranden/usercap1 
Update github.com/opencontainers/runtime-tools to v0.6.0
 2018-06-21 09:49:51 -07:00
Filipe Brandenburger
01d77d44f5 Update github.com/opencontainers/runtime-tools to v0.6.0 
Also add new dependencies on github.com/xeipuuv/gojson* (brought up by
new runtime-tools) and adapt the containerd/cri code to replace the APIs
that were removed by runtime-tools.

In particular, add new helpers to handle the capabilities, since
runtime-tools now split them into separate sets of functions for each
capability set.

Replace g.Spec() with g.Config since g.Spec() has been deprecated in the
runtime-tools API.

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
 2018-06-20 13:52:50 -07:00
Lantao Liu
441a57aa56
Merge pull request #821 from Random-Liu/fix-snapshotter-panic 
Fix snapshotter nil panic.
 2018-06-20 10:31:01 -07:00
Lantao Liu
9cb82aaecd
Merge pull request #823 from Random-Liu/update-crictl 
Update crictl to v1.11.0.
 2018-06-20 10:30:34 -07:00
Lantao Liu
cfa88fca32
Merge pull request #824 from Random-Liu/make-max-log-size-configurable 
Make max container log line size configurable through cloud init.
 2018-06-20 10:30:18 -07:00
Lantao Liu
b5d053f327 Make max container log line size configurable through cloud init. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-20 01:25:02 +00:00
Lantao Liu
bdddbed4de Update crictl to v1.11.0. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-20 00:57:53 +00:00