Commit Graph

10081 Commits

Author SHA1 Message Date
Alex Price
3353ab76d9 Add flag to overload default privileged host device behaviour
This commit adds a flag to the runtime config that allows overloading of the default
privileged behaviour. When the flag is enabled on a runtime, host devices won't
be appended to the runtime spec if the container is run as privileged.

By default the flag is false to maintain the current behaviour of privileged.

Fixes #1213

Signed-off-by: Alex Price <aprice@atlassian.com>
2019-08-08 12:16:42 +10:00
Lantao Liu
95bd02d28f
Merge pull request #1200 from jterry75/image_user
Assign ImageSpec User if SecurityContext is not set
2019-08-07 13:50:08 -07:00
Lantao Liu
8ea0cc90aa
Merge pull request #1221 from jterry75/log_g
Switch to containerd/log package
2019-08-07 13:49:33 -07:00
Michael Crosby
5222236c1b
Merge pull request #3502 from estesp/clarify-ctr
Clarify text on `ctr` support/inclusion
2019-08-07 16:27:41 -04:00
Phil Estes
4e6e61c44e
Merge pull request #3482 from crosbymichael/apply-remote
Add StreamProcessors for handling media types of content streams
2019-08-07 16:21:02 -04:00
Michael Crosby
930da7cfa7
Merge pull request #3503 from Random-Liu/default-ns
Save default namespace in the client.
2019-08-07 15:54:04 -04:00
Justin Terry (VM)
bc2cff625b Assign ImageSpec User if SecurityContext is not set
By default the SecurityContext for Container activation can contain a Username
UID, GID. The order of precedences is username, UID, GID. If none of these
options are specified as a last resort attempt to set the ImageSpec username.

Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
2019-08-07 12:20:52 -07:00
Justin Terry (VM)
193918b702 Switch to containerd/log package
Moves to the containerd/log package over logrus directly. This benefits the
traces because if using any log context such as OpenCensus on the entry gRPC
API all traces for that gRPC method will now contain the appropriate TraceID,
SpanID for easy correlation.

Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
2019-08-07 12:18:18 -07:00
Lantao Liu
af7b7cdb02 Save default namespace in the client.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-07 12:03:22 -07:00
Michael Crosby
552a0b1be5 Handle stderr in stream processors
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:36:52 +00:00
Michael Crosby
3fded74bc7 Add unpack opts
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Michael Crosby
26b90619e2 Pass apply opts through rootfs/* code
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Michael Crosby
e1489f93c3 Use named pipes for windows processors
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Michael Crosby
134d3c8159 Add windows apply code
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Michael Crosby
f867401c69 Use fds and pass Payloads over diff api
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Michael Crosby
366823727f Add server config for stream processors
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Michael Crosby
97a98773cf Add StreamProcessor for apply
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-07 18:35:55 +00:00
Phil Estes
0bc5df0354
Clarify text on ctr support/inclusion
Add some clarifying language around the expectations on `ctr`.

Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
2019-08-07 14:35:17 -04:00
Phil Estes
2ff1ef4f6c
Merge pull request #3499 from dmcgowan/update-beta-release-notes
Update 1.3 beta release notes
2019-08-07 10:05:35 -04:00
Phil Estes
4507cd1e04
Merge pull request #3500 from jterry75/revendor_go-winio
Update Microsoft/go-winio v0.4.14
2019-08-07 09:18:07 -04:00
Mike Brown
29104d94d6
Merge pull request #1223 from Random-Liu/update-support-metrics
Update support metrics to reflect 1.11 EOL.
2019-08-07 08:13:55 -05:00
Mike Brown
5fd4ab7ef9
Merge pull request #1226 from Random-Liu/use-golangci-lint
Use golangci-lint
2019-08-07 08:12:37 -05:00
Lantao Liu
9bf53555a0 Use golangci-lint.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-07 01:20:52 -07:00
Akihiro Suda
d0f4cf0bde
Merge pull request #3497 from ethan-daocloud/patch-1
pusher.go: error message typo correction
2019-08-07 13:08:36 +09:00
ethan
0a3769eec6 pusher.go: error message typo correction
Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>
2019-08-07 10:09:23 +08:00
Lantao Liu
c7b48c09d7
Merge pull request #1224 from Random-Liu/infer-systemd-cgroup
Infer systemd cgroup
2019-08-06 13:33:40 -07:00
Derek McGowan
635ccc0671
Add cri release notes
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2019-08-06 13:31:09 -07:00
Justin Terry (VM)
4667ee47a5 Update Microsoft/go-winio v0.4.14
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
2019-08-06 13:24:42 -07:00
Phil Estes
03d934adc4
Merge pull request #3474 from crosbymichael/uuid
Add UUID and server info to introspection
2019-08-06 15:58:05 -04:00
Michael Crosby
13c6dcdea1
Merge pull request #3498 from dmcgowan/limit-ppc64le
Limit default matrix to runc v2 runtime
2019-08-06 15:32:23 -04:00
Lantao Liu
eae5fc360f Infer systemd cgroup based on path suffix.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-06 11:00:51 -07:00
Derek McGowan
7792c23b14
Limit default matrix to runc v2 runtime
Explicitly add runc v1 runtime test on Linux

Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2019-08-06 10:21:11 -07:00
Akihiro Suda
225cc7d5bd
Merge pull request #3494 from jterry75/remove_v2
Completely remove Windows v2 in-tree shim
2019-08-07 02:19:12 +09:00
Wei Fu
7fddefc493
Merge pull request #3496 from darfux/v2_close_ttrpc_when_delete
v2: Close ttrpc connection when Delete()
2019-08-06 23:51:02 +08:00
Michael Crosby
28bdb71cc9
Merge pull request #3492 from Random-Liu/update-cri
Update cri to b213648c5b
2019-08-06 10:53:29 -04:00
Michael Crosby
9f0bc2b53f Add UUID and server info to introspection
Closes #1862

This adds a new rpc to the introspection service to provide server
information with a generated UUID that is done on demand and the os and
arch of the server.

ctr output:

```bash
> sudo ctr version

Client:
  Version:  v1.2.0-802-g57821695.m
  Revision: 578216950de9c1c188708369e2a31ac6c494dfee.m

Server:
  Version:  v1.2.0-802-g57821695.m
  Revision: 578216950de9c1c188708369e2a31ac6c494dfee.m
  UUID: 92e982a9-f13e-4a2c-9032-e69b27fed454
  OS: linux
  ARCH: amd64
```

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-06 14:40:48 +00:00
Phil Estes
dce8541387
Merge pull request #3493 from dmcgowan/fix-travis-matrix
Fix travis matrix
2019-08-06 10:04:50 -04:00
Li Yuxuan
08483d18ad v2: Close ttrpc connection when Delete()
This avoids potential socket leak when the connected v2 shim of runtime
serving multiple containers.

Signed-off-by: Li Yuxuan <liyuxuan04@baidu.com>
2019-08-06 20:35:59 +08:00
Lantao Liu
30fb9ea9b2 Update support metrics to reflect 1.11 EOL.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 18:17:30 -07:00
Lantao Liu
f9760af8d4
Merge pull request #1220 from Random-Liu/remove-no-pivot-deprecation
Do not deprecate no_pivot yet.
2019-08-05 18:15:51 -07:00
Justin Terry (VM)
4b5dfaee13 Completely remove Windows v2 in-tree shim
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
2019-08-05 16:49:56 -07:00
Derek McGowan
2398421d50
Fix travis matrix
Move matrix components next to each other for clarity.
Explicitly add special matrix combinations.

Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2019-08-05 15:35:51 -07:00
Lantao Liu
a5940da62c Remove ctr cri load and update cri-tools to v1.15.0
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 15:22:36 -07:00
Lantao Liu
871a8b89c8 Do not deprecate no_pivot yet.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 15:12:50 -07:00
Derek McGowan
29e56c5625
Merge pull request #3489 from mxpv/faulty
Mark devices with invalid state as faulty
2019-08-05 14:47:02 -07:00
Phil Estes
24e3848050
Merge pull request #3272 from nitkon/patch-2
travis: Enable travis CI for ppc64le arch
2019-08-05 15:51:08 -04:00
Maksym Pavlenko
0a4bf1bd1e Mark faulty devices
Signed-off-by: Maksym Pavlenko <makpav@amazon.com>
2019-08-05 12:05:36 -07:00
Lantao Liu
c99961c6c0 Update cri to b213648c5b
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 11:22:41 -07:00
Lantao Liu
b213648c5b
Merge pull request #1219 from Random-Liu/rename-test-containerd-bin
Rename the test binary to containerd-test.
2019-08-05 10:11:07 -07:00
Phil Estes
cb46663725
Merge pull request #3470 from mxpv/devmapper_err
Better error recovery in device mapper
2019-08-05 13:10:06 -04:00