github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
1,958 Commits 3 Branches 2 Tags 112 MiB
cbb7c28f19
Commit Graph

1958 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Lantao Liu
a2655acd2a Update kubernetes to v1.12.0-beta.1. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-10 17:34:48 -07:00
Lantao Liu
fe0cd3672b
Merge pull request #865 from Random-Liu/cache-image-reference 
Cache image reference
 2018-09-10 16:21:57 -07:00
Lantao Liu
ed68cfd543
Merge pull request #901 from Random-Liu/fix-hostname-env 
Fix hostname env.
 2018-09-10 13:57:03 -07:00
Lantao Liu
953d67d250 Create image reference cache. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-10 11:30:52 -07:00
Lantao Liu
f08a90ff64 Fix hostname env. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-10 10:58:17 -07:00
Lantao Liu
cfdf872493
Merge pull request #891 from tallclair/runtimehandler 
Add RuntimeHandler support
 2018-09-10 10:09:57 -07:00
Yu-Ju Hong
9cd964f62b
Merge pull request #898 from Random-Liu/revert-#895 
Revert "Add HOSTNAME to env by default for pod containers"
 2018-09-06 16:20:29 -07:00
Lantao Liu
eb3d3cfc5e Revert "Add HOSTNAME to env by default for pod containers" 
This reverts commit 4c3e195db3.

Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-06 15:30:53 -07:00
Lantao Liu
db8500d10c
Merge pull request #892 from Random-Liu/fix-volume-mount-order 
Sort volume mount.
 2018-09-06 14:44:45 -07:00
Tim Allclair
e7189a25c3
Add RuntimeHandler support 
Signed-off-by: Tim Allclair <tallclair@google.com>
 2018-09-05 17:27:35 -07:00
Lantao Liu
67c0b3e5e2
Merge pull request #894 from Random-Liu/support-masked-readonly-paths 
Support masked readonly paths
 2018-09-05 10:32:40 -07:00
Lantao Liu
1e471b1a44
Merge pull request #895 from estesp/add-hostname-env 
Add HOSTNAME to env by default for pod containers
 2018-09-05 10:31:34 -07:00
Phil Estes
4c3e195db3
Add HOSTNAME to env by default for pod containers 
To match expectations of users coming from Docker engine runtime, add
the HOSTNAME to the environment of new containers in a pod.

Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
 2018-09-05 12:04:40 -04:00
Lantao Liu
3e4cec8739 Add MaskedPaths and ReadonlyPaths support. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-04 23:49:16 -07:00
Lantao Liu
4a65865eaa Update kubernetes to 6b7c39a4f8d4c38e8724550cc3e6e41b7ac7a276 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-04 23:47:39 -07:00
Lantao Liu
063f8158f8 Sort volume mount. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-04 22:43:37 -07:00
Tim Allclair
89b5b3cc40
Vendor latest CRI API 
Signed-off-by: Tim Allclair <tallclair@google.com>
 2018-09-04 20:05:11 -07:00
Lantao Liu
49877571e9
Merge pull request #886 from DataDog/JulienBalestra/tls-stream 
stream: can use user certificates
 2018-09-03 23:35:18 -07:00
JulienBalestra
dffd0dfa0e
streaming: tls conf validation to func with tests 
Signed-off-by: JulienBalestra <julien.balestra@datadoghq.com>
 2018-08-30 15:10:48 +02:00
Lantao Liu
9acd95319a
Merge pull request #890 from Random-Liu/update-go-cni 
Update go-cni to 6d7b509a054a3cb1c35ed1865d4fde2f0cb547cd.
 2018-08-29 17:27:31 -07:00
Lantao Liu
3da8bedb65 Update go-cni to 6d7b509a054a3cb1c35ed1865d4fde2f0cb547cd. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-29 11:17:02 -07:00
JulienBalestra
859003a940
stream: struct for x509 key pair, update the docs, error management 
Signed-off-by: JulienBalestra <julien.balestra@datadoghq.com>
 2018-08-28 17:22:11 +02:00
JulienBalestra
b82b524260
stream: can use user certificates 
Signed-off-by: JulienBalestra <julien.balestra@datadoghq.com>
 2018-08-27 19:26:14 +02:00
Lantao Liu
df67dfff19
Merge pull request #885 from Random-Liu/enhance-container-stop 
Fix an issue that container/sandbox can't be stopped.
 2018-08-27 10:26:11 -07:00
Lantao Liu
bca304ff3e Fix an issue that container/sandbox can't be stopped. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-24 18:54:08 -07:00
Lantao Liu
a3af7393fe
Merge pull request #880 from thaJeztah/align_dependencies_to_tags 
Use tagged versions for dependencies where possible
 2018-08-22 10:36:35 -07:00
Sebastiaan van Stijn
1d7f5f43b2
Use tagged versions for dependencies where possible 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2018-08-22 15:31:25 +02:00
Lantao Liu
58eb04550d
Merge pull request #873 from miaoyq/verify-selinux-level 
Verify selinux level format
 2018-08-13 18:57:01 -07:00
Yanqiang Miao
a87bda08c0 update selinux to b6fa367 
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
 2018-08-14 08:33:43 +08:00
Yanqiang Miao
415727cd9f verify selinux level format 
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
 2018-08-14 08:33:34 +08:00
Lantao Liu
7d483b2fb0
Merge pull request #874 from Random-Liu/update-containerd 
Update containerd to b9eeaa1ce8.
 2018-08-09 11:00:36 -07:00
Lantao Liu
6379fd0346 Update containerd to b9eeaa1ce8. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-09 01:53:44 -07:00
Lantao Liu
c9d6151526
Merge pull request #869 from Random-Liu/support-netd 
Support netd in GCE bootstrap.
 2018-07-31 10:44:53 -07:00
Lantao Liu
d1dcacf9ef Support netd in GCE bootstrap. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-30 23:37:00 -07:00
Lantao Liu
1263024a5a
Merge pull request #864 from Random-Liu/unpack-during-import 
Unpack image during import.
 2018-07-26 10:12:45 -07:00
Lantao Liu
e1a37e8797 Unpack image during import. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-26 07:48:41 +00:00
Lantao Liu
a0cfc8c1d2
Merge pull request #857 from egernst/untrusted-priv 
sandbox: separate host accessing workload and privileged
 2018-07-24 12:11:41 -07:00
Eric Ernst
9a01272dc2 sandbox: separate host accessing workload and privileged 
VM isolated runtimes can support privileged workloads. In this
scenario, access to the guest VM is provided instead of the host.
Based on this, allow untrusted runtimes to run privileged workloads.

If the workload is specifically asking for node PID/IPC/network, etc.,
then continue to require the trusted runtime.

This commit repurposes the hostPrivilegedSandbox utility function to
only check for node namespace checking.

Fixes: #855

Signed-off-by: Eric Ernst <eric.ernst@intel.com>
 2018-07-22 16:51:22 -07:00
Lantao Liu
2be13a8a30
Merge pull request #858 from Random-Liu/stream-serve-on-local 
Serve streaming on localhost by default to match k8s 1.11 default.
 2018-07-20 19:12:53 -07:00
Lantao Liu
b3d6f16383 Serve streaming on localhost by default to match k8s 1.11 default. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-21 01:10:45 +00:00
Lantao Liu
42a98de252
Merge pull request #851 from yanxuean/support-no-pivot 
support no_pivot option for runc
 2018-07-19 20:31:38 -07:00
yanxuean
7065dd81f9 support no_pivot option for runc 
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
 2018-07-20 08:46:50 +08:00
Lantao Liu
7beac6fcc1
Merge pull request #849 from dmcgowan/remove-stringid 
Replace stringid call with simple random reader
 2018-07-12 18:32:28 -07:00
Derek McGowan
1984e451d5 Replace stringid with simple rand reader 
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
 2018-07-12 16:40:45 -07:00
Lantao Liu
2eb817c7bd
Merge pull request #843 from Random-Liu/document-no-overwrite-dir 
Use `--no-overwrite-dir` in installation doc.
 2018-07-11 11:50:46 -07:00
Lantao Liu
5637e8be40 Set 0022 umask for hack/release.sh. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 18:26:13 +00:00
Lantao Liu
0f3c83b11b Use --no-overwrite-dir in installation doc. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 18:04:48 +00:00
Lantao Liu
1d0d9b3423
Merge pull request #841 from Random-Liu/add-back-missing-vendor 
Add missing vendor back.
 2018-07-11 10:42:38 -07:00
Lantao Liu
fb60d18fad Add missing vendor back. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 08:49:47 +00:00
Lantao Liu
ca32566575
Merge pull request #838 from Random-Liu/add-auth-config 
Add auth config
 2018-07-10 23:55:33 -07:00